--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"info","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f786c35b6cebc95aa919334d38bf141df7610608f5242daa958cb5a03bc30122","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24ad76e99d3db98bf6fa7232633cce33030793f671aa8ebe4e9db414ffdf1b84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:51:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:51:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24ad76e99d3db98bf6fa7232633cce33030793f671aa8ebe4e9db414ffdf1b84"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/043e9366356ee2d3bfa31befc24aaace076873feb55824d159f960993e657d29"}
{"level":"info","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24ad76e99d3db98bf6fa7232633cce33030793f671aa8ebe4e9db414ffdf1b84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f786c35b6cebc95aa919334d38bf141df7610608f5242daa958cb5a03bc30122","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:51:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:51:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f786c35b6cebc95aa919334d38bf141df7610608f5242daa958cb5a03bc30122","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24ad76e99d3db98bf6fa7232633cce33030793f671aa8ebe4e9db414ffdf1b84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f786c35b6cebc95aa919334d38bf141df7610608f5242daa958cb5a03bc30122","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f786c35b6cebc95aa919334d38bf141df7610608f5242daa958cb5a03bc30122"}
{"level":"debug","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f786c35b6cebc95aa919334d38bf141df7610608f5242daa958cb5a03bc30122","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:51:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:51:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f786c35b6cebc95aa919334d38bf141df7610608f5242daa958cb5a03bc30122"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f786c35b6cebc95aa919334d38bf141df7610608f5242daa958cb5a03bc30122","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"334979cfe3d72917cf050080a8372b551ace6f3d153eb80a945b1e8e57c59963","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:51:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:51:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"334979cfe3d72917cf050080a8372b551ace6f3d153eb80a945b1e8e57c59963","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f786c35b6cebc95aa919334d38bf141df7610608f5242daa958cb5a03bc30122","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"334979cfe3d72917cf050080a8372b551ace6f3d153eb80a945b1e8e57c59963","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24ad76e99d3db98bf6fa7232633cce33030793f671aa8ebe4e9db414ffdf1b84"}
{"level":"debug","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"334979cfe3d72917cf050080a8372b551ace6f3d153eb80a945b1e8e57c59963","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"334979cfe3d72917cf050080a8372b551ace6f3d153eb80a945b1e8e57c59963","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f786c35b6cebc95aa919334d38bf141df7610608f5242daa958cb5a03bc30122"}
{"level":"debug","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0dcae7ba77ebb918f91c361c870094b4d0ec68f8fef0bd3f4bea654f1f532e01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:51:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:51:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/334979cfe3d72917cf050080a8372b551ace6f3d153eb80a945b1e8e57c59963"}
{"level":"info","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0dcae7ba77ebb918f91c361c870094b4d0ec68f8fef0bd3f4bea654f1f532e01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"334979cfe3d72917cf050080a8372b551ace6f3d153eb80a945b1e8e57c59963","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:51:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:51:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["334979cfe3d72917cf050080a8372b551ace6f3d153eb80a945b1e8e57c59963"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"334979cfe3d72917cf050080a8372b551ace6f3d153eb80a945b1e8e57c59963","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"942f2dcc59383aacdf18b6c002924d0e70b47618190fd93765c47c784551fbb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:51:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:51:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0dcae7ba77ebb918f91c361c870094b4d0ec68f8fef0bd3f4bea654f1f532e01"}
{"level":"info","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"942f2dcc59383aacdf18b6c002924d0e70b47618190fd93765c47c784551fbb8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0dcae7ba77ebb918f91c361c870094b4d0ec68f8fef0bd3f4bea654f1f532e01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:51:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:51:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0dcae7ba77ebb918f91c361c870094b4d0ec68f8fef0bd3f4bea654f1f532e01"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/942f2dcc59383aacdf18b6c002924d0e70b47618190fd93765c47c784551fbb8"}
{"level":"info","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0dcae7ba77ebb918f91c361c870094b4d0ec68f8fef0bd3f4bea654f1f532e01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"334979cfe3d72917cf050080a8372b551ace6f3d153eb80a945b1e8e57c59963","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"942f2dcc59383aacdf18b6c002924d0e70b47618190fd93765c47c784551fbb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:51:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:51:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["942f2dcc59383aacdf18b6c002924d0e70b47618190fd93765c47c784551fbb8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"942f2dcc59383aacdf18b6c002924d0e70b47618190fd93765c47c784551fbb8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0dcae7ba77ebb918f91c361c870094b4d0ec68f8fef0bd3f4bea654f1f532e01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:51:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:51:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0dcae7ba77ebb918f91c361c870094b4d0ec68f8fef0bd3f4bea654f1f532e01"}
{"level":"info","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0dcae7ba77ebb918f91c361c870094b4d0ec68f8fef0bd3f4bea654f1f532e01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"942f2dcc59383aacdf18b6c002924d0e70b47618190fd93765c47c784551fbb8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0dcae7ba77ebb918f91c361c870094b4d0ec68f8fef0bd3f4bea654f1f532e01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:51:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:51:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0dcae7ba77ebb918f91c361c870094b4d0ec68f8fef0bd3f4bea654f1f532e01"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/334979cfe3d72917cf050080a8372b551ace6f3d153eb80a945b1e8e57c59963"}
{"level":"info","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0dcae7ba77ebb918f91c361c870094b4d0ec68f8fef0bd3f4bea654f1f532e01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0dcae7ba77ebb918f91c361c870094b4d0ec68f8fef0bd3f4bea654f1f532e01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:51:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:51:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0dcae7ba77ebb918f91c361c870094b4d0ec68f8fef0bd3f4bea654f1f532e01"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0dcae7ba77ebb918f91c361c870094b4d0ec68f8fef0bd3f4bea654f1f532e01","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0dcae7ba77ebb918f91c361c870094b4d0ec68f8fef0bd3f4bea654f1f532e01\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0dcae7ba77ebb918f91c361c870094b4d0ec68f8fef0bd3f4bea654f1f532e01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5509c857edeee41ea7bfa66f7f746e7b95dd45adfb62c41446b712e26555679e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:51:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:51:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/942f2dcc59383aacdf18b6c002924d0e70b47618190fd93765c47c784551fbb8"}
{"level":"info","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5509c857edeee41ea7bfa66f7f746e7b95dd45adfb62c41446b712e26555679e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0dcae7ba77ebb918f91c361c870094b4d0ec68f8fef0bd3f4bea654f1f532e01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:51:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:51:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0dcae7ba77ebb918f91c361c870094b4d0ec68f8fef0bd3f4bea654f1f532e01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5509c857edeee41ea7bfa66f7f746e7b95dd45adfb62c41446b712e26555679e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0dcae7ba77ebb918f91c361c870094b4d0ec68f8fef0bd3f4bea654f1f532e01","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0dcae7ba77ebb918f91c361c870094b4d0ec68f8fef0bd3f4bea654f1f532e01"}
{"level":"debug","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0dcae7ba77ebb918f91c361c870094b4d0ec68f8fef0bd3f4bea654f1f532e01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:51:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:51:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0dcae7ba77ebb918f91c361c870094b4d0ec68f8fef0bd3f4bea654f1f532e01"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0dcae7ba77ebb918f91c361c870094b4d0ec68f8fef0bd3f4bea654f1f532e01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5509c857edeee41ea7bfa66f7f746e7b95dd45adfb62c41446b712e26555679e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:51:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:51:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5509c857edeee41ea7bfa66f7f746e7b95dd45adfb62c41446b712e26555679e"}
{"level":"info","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5509c857edeee41ea7bfa66f7f746e7b95dd45adfb62c41446b712e26555679e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0dcae7ba77ebb918f91c361c870094b4d0ec68f8fef0bd3f4bea654f1f532e01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:51:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:51:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0dcae7ba77ebb918f91c361c870094b4d0ec68f8fef0bd3f4bea654f1f532e01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5509c857edeee41ea7bfa66f7f746e7b95dd45adfb62c41446b712e26555679e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:51:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:51:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5509c857edeee41ea7bfa66f7f746e7b95dd45adfb62c41446b712e26555679e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0dcae7ba77ebb918f91c361c870094b4d0ec68f8fef0bd3f4bea654f1f532e01"}
{"level":"info","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5509c857edeee41ea7bfa66f7f746e7b95dd45adfb62c41446b712e26555679e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0dcae7ba77ebb918f91c361c870094b4d0ec68f8fef0bd3f4bea654f1f532e01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:51:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:51:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0dcae7ba77ebb918f91c361c870094b4d0ec68f8fef0bd3f4bea654f1f532e01"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5509c857edeee41ea7bfa66f7f746e7b95dd45adfb62c41446b712e26555679e"}
{"level":"info","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0dcae7ba77ebb918f91c361c870094b4d0ec68f8fef0bd3f4bea654f1f532e01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5509c857edeee41ea7bfa66f7f746e7b95dd45adfb62c41446b712e26555679e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5719453ee65b093795ce693559bddbbdd14035cc18f74226c2c2a3a4c10ebdc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:51:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:51:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5719453ee65b093795ce693559bddbbdd14035cc18f74226c2c2a3a4c10ebdc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0dcae7ba77ebb918f91c361c870094b4d0ec68f8fef0bd3f4bea654f1f532e01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:51:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:51:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0dcae7ba77ebb918f91c361c870094b4d0ec68f8fef0bd3f4bea654f1f532e01"}
{"level":"info","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0dcae7ba77ebb918f91c361c870094b4d0ec68f8fef0bd3f4bea654f1f532e01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3942ecbd320f580709360526396dbff8a176e2a62d6c1e598d97bf7e6478feef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:51:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:51:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3942ecbd320f580709360526396dbff8a176e2a62d6c1e598d97bf7e6478feef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5719453ee65b093795ce693559bddbbdd14035cc18f74226c2c2a3a4c10ebdc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:51:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:51:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5719453ee65b093795ce693559bddbbdd14035cc18f74226c2c2a3a4c10ebdc4"}
{"level":"info","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5719453ee65b093795ce693559bddbbdd14035cc18f74226c2c2a3a4c10ebdc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0dcae7ba77ebb918f91c361c870094b4d0ec68f8fef0bd3f4bea654f1f532e01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:51:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:51:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0dcae7ba77ebb918f91c361c870094b4d0ec68f8fef0bd3f4bea654f1f532e01"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5509c857edeee41ea7bfa66f7f746e7b95dd45adfb62c41446b712e26555679e"}
{"level":"info","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0dcae7ba77ebb918f91c361c870094b4d0ec68f8fef0bd3f4bea654f1f532e01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3942ecbd320f580709360526396dbff8a176e2a62d6c1e598d97bf7e6478feef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:51:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:51:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3942ecbd320f580709360526396dbff8a176e2a62d6c1e598d97bf7e6478feef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5719453ee65b093795ce693559bddbbdd14035cc18f74226c2c2a3a4c10ebdc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:51:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:51:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5719453ee65b093795ce693559bddbbdd14035cc18f74226c2c2a3a4c10ebdc4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3942ecbd320f580709360526396dbff8a176e2a62d6c1e598d97bf7e6478feef"}
{"level":"info","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5719453ee65b093795ce693559bddbbdd14035cc18f74226c2c2a3a4c10ebdc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0dcae7ba77ebb918f91c361c870094b4d0ec68f8fef0bd3f4bea654f1f532e01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:51:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:51:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0dcae7ba77ebb918f91c361c870094b4d0ec68f8fef0bd3f4bea654f1f532e01"}
{"level":"info","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5719453ee65b093795ce693559bddbbdd14035cc18f74226c2c2a3a4c10ebdc4"}
{"level":"info","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0dcae7ba77ebb918f91c361c870094b4d0ec68f8fef0bd3f4bea654f1f532e01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3942ecbd320f580709360526396dbff8a176e2a62d6c1e598d97bf7e6478feef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5719453ee65b093795ce693559bddbbdd14035cc18f74226c2c2a3a4c10ebdc4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3942ecbd320f580709360526396dbff8a176e2a62d6c1e598d97bf7e6478feef"}
{"level":"debug","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0dcae7ba77ebb918f91c361c870094b4d0ec68f8fef0bd3f4bea654f1f532e01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:51:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:51:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0dcae7ba77ebb918f91c361c870094b4d0ec68f8fef0bd3f4bea654f1f532e01"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0dcae7ba77ebb918f91c361c870094b4d0ec68f8fef0bd3f4bea654f1f532e01"}
{"level":"info","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0dcae7ba77ebb918f91c361c870094b4d0ec68f8fef0bd3f4bea654f1f532e01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3942ecbd320f580709360526396dbff8a176e2a62d6c1e598d97bf7e6478feef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:51:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:51:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3942ecbd320f580709360526396dbff8a176e2a62d6c1e598d97bf7e6478feef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0dcae7ba77ebb918f91c361c870094b4d0ec68f8fef0bd3f4bea654f1f532e01"}
{"level":"info","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3942ecbd320f580709360526396dbff8a176e2a62d6c1e598d97bf7e6478feef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0dcae7ba77ebb918f91c361c870094b4d0ec68f8fef0bd3f4bea654f1f532e01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3942ecbd320f580709360526396dbff8a176e2a62d6c1e598d97bf7e6478feef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:51:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:51:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3942ecbd320f580709360526396dbff8a176e2a62d6c1e598d97bf7e6478feef"}
{"level":"info","ts":"2026-07-09T16:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3942ecbd320f580709360526396dbff8a176e2a62d6c1e598d97bf7e6478feef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3942ecbd320f580709360526396dbff8a176e2a62d6c1e598d97bf7e6478feef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3942ecbd320f580709360526396dbff8a176e2a62d6c1e598d97bf7e6478feef","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3942ecbd320f580709360526396dbff8a176e2a62d6c1e598d97bf7e6478feef"}
{"level":"debug","ts":"2026-07-09T16:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3942ecbd320f580709360526396dbff8a176e2a62d6c1e598d97bf7e6478feef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:51:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:51:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3942ecbd320f580709360526396dbff8a176e2a62d6c1e598d97bf7e6478feef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3942ecbd320f580709360526396dbff8a176e2a62d6c1e598d97bf7e6478feef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3942ecbd320f580709360526396dbff8a176e2a62d6c1e598d97bf7e6478feef","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3942ecbd320f580709360526396dbff8a176e2a62d6c1e598d97bf7e6478feef"}
{"level":"debug","ts":"2026-07-09T16:51:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1c5b936252b577f498c93fac77f8fd8e13cd9b1b72e8e28f529af065382b8f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:51:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:51:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1c5b936252b577f498c93fac77f8fd8e13cd9b1b72e8e28f529af065382b8f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1c5b936252b577f498c93fac77f8fd8e13cd9b1b72e8e28f529af065382b8f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1c5b936252b577f498c93fac77f8fd8e13cd9b1b72e8e28f529af065382b8f1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:51:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1c5b936252b577f498c93fac77f8fd8e13cd9b1b72e8e28f529af065382b8f1"}
{"level":"debug","ts":"2026-07-09T16:51:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1c5b936252b577f498c93fac77f8fd8e13cd9b1b72e8e28f529af065382b8f1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:51:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1c5b936252b577f498c93fac77f8fd8e13cd9b1b72e8e28f529af065382b8f1"}
{"level":"debug","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1c5b936252b577f498c93fac77f8fd8e13cd9b1b72e8e28f529af065382b8f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:51:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:51:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1c5b936252b577f498c93fac77f8fd8e13cd9b1b72e8e28f529af065382b8f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1c5b936252b577f498c93fac77f8fd8e13cd9b1b72e8e28f529af065382b8f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1c5b936252b577f498c93fac77f8fd8e13cd9b1b72e8e28f529af065382b8f1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1c5b936252b577f498c93fac77f8fd8e13cd9b1b72e8e28f529af065382b8f1"}
{"level":"debug","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea2e30821faab739abef5167da484593676c2e8b41b21bf476bf9f750693c663","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:51:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:51:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea2e30821faab739abef5167da484593676c2e8b41b21bf476bf9f750693c663","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea2e30821faab739abef5167da484593676c2e8b41b21bf476bf9f750693c663","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea2e30821faab739abef5167da484593676c2e8b41b21bf476bf9f750693c663","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea2e30821faab739abef5167da484593676c2e8b41b21bf476bf9f750693c663"}
{"level":"debug","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea2e30821faab739abef5167da484593676c2e8b41b21bf476bf9f750693c663","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea2e30821faab739abef5167da484593676c2e8b41b21bf476bf9f750693c663"}
{"level":"debug","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea2e30821faab739abef5167da484593676c2e8b41b21bf476bf9f750693c663","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:51:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:51:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea2e30821faab739abef5167da484593676c2e8b41b21bf476bf9f750693c663"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea2e30821faab739abef5167da484593676c2e8b41b21bf476bf9f750693c663","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea2e30821faab739abef5167da484593676c2e8b41b21bf476bf9f750693c663","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:51:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:51:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea2e30821faab739abef5167da484593676c2e8b41b21bf476bf9f750693c663","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7766aca82aa2c809f46b78222d7df2cbc897976a29756932a708300e86c9cd09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:51:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:51:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea2e30821faab739abef5167da484593676c2e8b41b21bf476bf9f750693c663"}
{"level":"info","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7766aca82aa2c809f46b78222d7df2cbc897976a29756932a708300e86c9cd09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea2e30821faab739abef5167da484593676c2e8b41b21bf476bf9f750693c663","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:51:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:51:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea2e30821faab739abef5167da484593676c2e8b41b21bf476bf9f750693c663"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7766aca82aa2c809f46b78222d7df2cbc897976a29756932a708300e86c9cd09"}
{"level":"info","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea2e30821faab739abef5167da484593676c2e8b41b21bf476bf9f750693c663","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7766aca82aa2c809f46b78222d7df2cbc897976a29756932a708300e86c9cd09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:51:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:51:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7766aca82aa2c809f46b78222d7df2cbc897976a29756932a708300e86c9cd09"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7766aca82aa2c809f46b78222d7df2cbc897976a29756932a708300e86c9cd09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea2e30821faab739abef5167da484593676c2e8b41b21bf476bf9f750693c663","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:51:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:51:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea2e30821faab739abef5167da484593676c2e8b41b21bf476bf9f750693c663"}
{"level":"info","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea2e30821faab739abef5167da484593676c2e8b41b21bf476bf9f750693c663","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7766aca82aa2c809f46b78222d7df2cbc897976a29756932a708300e86c9cd09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:51:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:51:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7766aca82aa2c809f46b78222d7df2cbc897976a29756932a708300e86c9cd09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea2e30821faab739abef5167da484593676c2e8b41b21bf476bf9f750693c663","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:51:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:51:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea2e30821faab739abef5167da484593676c2e8b41b21bf476bf9f750693c663"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7766aca82aa2c809f46b78222d7df2cbc897976a29756932a708300e86c9cd09"}
{"level":"info","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea2e30821faab739abef5167da484593676c2e8b41b21bf476bf9f750693c663","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7766aca82aa2c809f46b78222d7df2cbc897976a29756932a708300e86c9cd09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:51:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:51:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7766aca82aa2c809f46b78222d7df2cbc897976a29756932a708300e86c9cd09"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea2e30821faab739abef5167da484593676c2e8b41b21bf476bf9f750693c663"}
{"level":"info","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7766aca82aa2c809f46b78222d7df2cbc897976a29756932a708300e86c9cd09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea2e30821faab739abef5167da484593676c2e8b41b21bf476bf9f750693c663","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7766aca82aa2c809f46b78222d7df2cbc897976a29756932a708300e86c9cd09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:51:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:51:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7766aca82aa2c809f46b78222d7df2cbc897976a29756932a708300e86c9cd09"}
{"level":"info","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7766aca82aa2c809f46b78222d7df2cbc897976a29756932a708300e86c9cd09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7766aca82aa2c809f46b78222d7df2cbc897976a29756932a708300e86c9cd09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:51:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:51:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7766aca82aa2c809f46b78222d7df2cbc897976a29756932a708300e86c9cd09"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7766aca82aa2c809f46b78222d7df2cbc897976a29756932a708300e86c9cd09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7766aca82aa2c809f46b78222d7df2cbc897976a29756932a708300e86c9cd09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:51:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:51:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7766aca82aa2c809f46b78222d7df2cbc897976a29756932a708300e86c9cd09"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7766aca82aa2c809f46b78222d7df2cbc897976a29756932a708300e86c9cd09","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7766aca82aa2c809f46b78222d7df2cbc897976a29756932a708300e86c9cd09\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7766aca82aa2c809f46b78222d7df2cbc897976a29756932a708300e86c9cd09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7766aca82aa2c809f46b78222d7df2cbc897976a29756932a708300e86c9cd09","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea2e30821faab739abef5167da484593676c2e8b41b21bf476bf9f750693c663"}
{"level":"info","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7766aca82aa2c809f46b78222d7df2cbc897976a29756932a708300e86c9cd09"}
{"level":"debug","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28be827e9e465483c1a86ba02840129ea887a29aa8440b8406050c6a04e723a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:51:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:51:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28be827e9e465483c1a86ba02840129ea887a29aa8440b8406050c6a04e723a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28be827e9e465483c1a86ba02840129ea887a29aa8440b8406050c6a04e723a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28be827e9e465483c1a86ba02840129ea887a29aa8440b8406050c6a04e723a5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28be827e9e465483c1a86ba02840129ea887a29aa8440b8406050c6a04e723a5"}
{"level":"debug","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28be827e9e465483c1a86ba02840129ea887a29aa8440b8406050c6a04e723a5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28be827e9e465483c1a86ba02840129ea887a29aa8440b8406050c6a04e723a5"}
{"level":"debug","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28be827e9e465483c1a86ba02840129ea887a29aa8440b8406050c6a04e723a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:51:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:51:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28be827e9e465483c1a86ba02840129ea887a29aa8440b8406050c6a04e723a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28be827e9e465483c1a86ba02840129ea887a29aa8440b8406050c6a04e723a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28be827e9e465483c1a86ba02840129ea887a29aa8440b8406050c6a04e723a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:51:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:51:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28be827e9e465483c1a86ba02840129ea887a29aa8440b8406050c6a04e723a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e9900ca657a799ef3c2ea3ac21d302e64cd690f4ebd1713012bb7051ef1f09c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:51:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:51:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28be827e9e465483c1a86ba02840129ea887a29aa8440b8406050c6a04e723a5"}
{"level":"info","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e9900ca657a799ef3c2ea3ac21d302e64cd690f4ebd1713012bb7051ef1f09c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28be827e9e465483c1a86ba02840129ea887a29aa8440b8406050c6a04e723a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:51:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:51:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28be827e9e465483c1a86ba02840129ea887a29aa8440b8406050c6a04e723a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28be827e9e465483c1a86ba02840129ea887a29aa8440b8406050c6a04e723a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e9900ca657a799ef3c2ea3ac21d302e64cd690f4ebd1713012bb7051ef1f09c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:51:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:51:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e9900ca657a799ef3c2ea3ac21d302e64cd690f4ebd1713012bb7051ef1f09c"}
{"level":"info","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e9900ca657a799ef3c2ea3ac21d302e64cd690f4ebd1713012bb7051ef1f09c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28be827e9e465483c1a86ba02840129ea887a29aa8440b8406050c6a04e723a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:51:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:51:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28be827e9e465483c1a86ba02840129ea887a29aa8440b8406050c6a04e723a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e9900ca657a799ef3c2ea3ac21d302e64cd690f4ebd1713012bb7051ef1f09c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:51:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:51:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e9900ca657a799ef3c2ea3ac21d302e64cd690f4ebd1713012bb7051ef1f09c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28be827e9e465483c1a86ba02840129ea887a29aa8440b8406050c6a04e723a5"}
{"level":"info","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e9900ca657a799ef3c2ea3ac21d302e64cd690f4ebd1713012bb7051ef1f09c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28be827e9e465483c1a86ba02840129ea887a29aa8440b8406050c6a04e723a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:51:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:51:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28be827e9e465483c1a86ba02840129ea887a29aa8440b8406050c6a04e723a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e9900ca657a799ef3c2ea3ac21d302e64cd690f4ebd1713012bb7051ef1f09c"}
{"level":"info","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28be827e9e465483c1a86ba02840129ea887a29aa8440b8406050c6a04e723a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e9900ca657a799ef3c2ea3ac21d302e64cd690f4ebd1713012bb7051ef1f09c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28be827e9e465483c1a86ba02840129ea887a29aa8440b8406050c6a04e723a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:51:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:51:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28be827e9e465483c1a86ba02840129ea887a29aa8440b8406050c6a04e723a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28be827e9e465483c1a86ba02840129ea887a29aa8440b8406050c6a04e723a5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28be827e9e465483c1a86ba02840129ea887a29aa8440b8406050c6a04e723a5"}
{"level":"debug","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28be827e9e465483c1a86ba02840129ea887a29aa8440b8406050c6a04e723a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:51:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:51:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28be827e9e465483c1a86ba02840129ea887a29aa8440b8406050c6a04e723a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28be827e9e465483c1a86ba02840129ea887a29aa8440b8406050c6a04e723a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28be827e9e465483c1a86ba02840129ea887a29aa8440b8406050c6a04e723a5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e9900ca657a799ef3c2ea3ac21d302e64cd690f4ebd1713012bb7051ef1f09c"}
{"level":"info","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28be827e9e465483c1a86ba02840129ea887a29aa8440b8406050c6a04e723a5"}
{"level":"debug","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10b7ae3c3d47247c959ee62d1b6f9aa0f841e0165d2f918227b4327ec5b1a3d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:51:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:51:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10b7ae3c3d47247c959ee62d1b6f9aa0f841e0165d2f918227b4327ec5b1a3d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"10b7ae3c3d47247c959ee62d1b6f9aa0f841e0165d2f918227b4327ec5b1a3d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"10b7ae3c3d47247c959ee62d1b6f9aa0f841e0165d2f918227b4327ec5b1a3d6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10b7ae3c3d47247c959ee62d1b6f9aa0f841e0165d2f918227b4327ec5b1a3d6"}
{"level":"debug","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"10b7ae3c3d47247c959ee62d1b6f9aa0f841e0165d2f918227b4327ec5b1a3d6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10b7ae3c3d47247c959ee62d1b6f9aa0f841e0165d2f918227b4327ec5b1a3d6"}
{"level":"debug","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10b7ae3c3d47247c959ee62d1b6f9aa0f841e0165d2f918227b4327ec5b1a3d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:51:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:51:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["10b7ae3c3d47247c959ee62d1b6f9aa0f841e0165d2f918227b4327ec5b1a3d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10b7ae3c3d47247c959ee62d1b6f9aa0f841e0165d2f918227b4327ec5b1a3d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"10b7ae3c3d47247c959ee62d1b6f9aa0f841e0165d2f918227b4327ec5b1a3d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b18305f1c1f225919de069d25881e9c06884b618649def1c31b58233acc24b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:51:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:51:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b18305f1c1f225919de069d25881e9c06884b618649def1c31b58233acc24b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10b7ae3c3d47247c959ee62d1b6f9aa0f841e0165d2f918227b4327ec5b1a3d6"}
{"level":"debug","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b18305f1c1f225919de069d25881e9c06884b618649def1c31b58233acc24b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:51:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:51:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b18305f1c1f225919de069d25881e9c06884b618649def1c31b58233acc24b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b18305f1c1f225919de069d25881e9c06884b618649def1c31b58233acc24b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:51:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:51:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b18305f1c1f225919de069d25881e9c06884b618649def1c31b58233acc24b5"}
{"level":"error","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9b18305f1c1f225919de069d25881e9c06884b618649def1c31b58233acc24b5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9b18305f1c1f225919de069d25881e9c06884b618649def1c31b58233acc24b5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b18305f1c1f225919de069d25881e9c06884b618649def1c31b58233acc24b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b18305f1c1f225919de069d25881e9c06884b618649def1c31b58233acc24b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b18305f1c1f225919de069d25881e9c06884b618649def1c31b58233acc24b5"}
{"level":"debug","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b7eed3040cd46280b254b7f760b42b7dec7057ce5b6bbe7420483a2bd5cf9e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:51:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:51:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b7eed3040cd46280b254b7f760b42b7dec7057ce5b6bbe7420483a2bd5cf9e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b7eed3040cd46280b254b7f760b42b7dec7057ce5b6bbe7420483a2bd5cf9e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b18305f1c1f225919de069d25881e9c06884b618649def1c31b58233acc24b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:51:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:51:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b18305f1c1f225919de069d25881e9c06884b618649def1c31b58233acc24b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b7eed3040cd46280b254b7f760b42b7dec7057ce5b6bbe7420483a2bd5cf9e4"}
{"level":"info","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b18305f1c1f225919de069d25881e9c06884b618649def1c31b58233acc24b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b7eed3040cd46280b254b7f760b42b7dec7057ce5b6bbe7420483a2bd5cf9e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b18305f1c1f225919de069d25881e9c06884b618649def1c31b58233acc24b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b7eed3040cd46280b254b7f760b42b7dec7057ce5b6bbe7420483a2bd5cf9e4"}
{"level":"debug","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b7eed3040cd46280b254b7f760b42b7dec7057ce5b6bbe7420483a2bd5cf9e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:51:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:51:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b7eed3040cd46280b254b7f760b42b7dec7057ce5b6bbe7420483a2bd5cf9e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b18305f1c1f225919de069d25881e9c06884b618649def1c31b58233acc24b5"}
{"level":"info","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b7eed3040cd46280b254b7f760b42b7dec7057ce5b6bbe7420483a2bd5cf9e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b7eed3040cd46280b254b7f760b42b7dec7057ce5b6bbe7420483a2bd5cf9e4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b7eed3040cd46280b254b7f760b42b7dec7057ce5b6bbe7420483a2bd5cf9e4"}
{"level":"debug","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e99e19fb7fbaab9a8c9f9a45c58f984179dbb4d9db5382a0fbf89be8a6bbf63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:51:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:51:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e99e19fb7fbaab9a8c9f9a45c58f984179dbb4d9db5382a0fbf89be8a6bbf63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e99e19fb7fbaab9a8c9f9a45c58f984179dbb4d9db5382a0fbf89be8a6bbf63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e99e19fb7fbaab9a8c9f9a45c58f984179dbb4d9db5382a0fbf89be8a6bbf63","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e99e19fb7fbaab9a8c9f9a45c58f984179dbb4d9db5382a0fbf89be8a6bbf63"}
{"level":"debug","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e99e19fb7fbaab9a8c9f9a45c58f984179dbb4d9db5382a0fbf89be8a6bbf63","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e99e19fb7fbaab9a8c9f9a45c58f984179dbb4d9db5382a0fbf89be8a6bbf63"}
{"level":"debug","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e99e19fb7fbaab9a8c9f9a45c58f984179dbb4d9db5382a0fbf89be8a6bbf63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:51:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:51:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e99e19fb7fbaab9a8c9f9a45c58f984179dbb4d9db5382a0fbf89be8a6bbf63"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e99e19fb7fbaab9a8c9f9a45c58f984179dbb4d9db5382a0fbf89be8a6bbf63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e99e19fb7fbaab9a8c9f9a45c58f984179dbb4d9db5382a0fbf89be8a6bbf63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ddd7728a30af0ce5c1ed50f9cbdd8b44aeacdd369ed5215481967d231ee4dd6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:51:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:51:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ddd7728a30af0ce5c1ed50f9cbdd8b44aeacdd369ed5215481967d231ee4dd6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c31f6ae53a21170011f62e93f647ce7c788a3cd520ed1681cf91e69753633ce1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:51:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:51:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e99e19fb7fbaab9a8c9f9a45c58f984179dbb4d9db5382a0fbf89be8a6bbf63"}
{"level":"info","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c31f6ae53a21170011f62e93f647ce7c788a3cd520ed1681cf91e69753633ce1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ddd7728a30af0ce5c1ed50f9cbdd8b44aeacdd369ed5215481967d231ee4dd6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:51:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:51:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ddd7728a30af0ce5c1ed50f9cbdd8b44aeacdd369ed5215481967d231ee4dd6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a1a12c25dd0d4130453bc0edc430a35756da8a70645cafba59013d2fd216f28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:51:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:51:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ddd7728a30af0ce5c1ed50f9cbdd8b44aeacdd369ed5215481967d231ee4dd6"}
{"level":"info","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a1a12c25dd0d4130453bc0edc430a35756da8a70645cafba59013d2fd216f28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c31f6ae53a21170011f62e93f647ce7c788a3cd520ed1681cf91e69753633ce1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:51:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:51:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c31f6ae53a21170011f62e93f647ce7c788a3cd520ed1681cf91e69753633ce1"}
{"level":"info","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c31f6ae53a21170011f62e93f647ce7c788a3cd520ed1681cf91e69753633ce1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ddd7728a30af0ce5c1ed50f9cbdd8b44aeacdd369ed5215481967d231ee4dd6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:51:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:51:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ddd7728a30af0ce5c1ed50f9cbdd8b44aeacdd369ed5215481967d231ee4dd6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ddd7728a30af0ce5c1ed50f9cbdd8b44aeacdd369ed5215481967d231ee4dd6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a1a12c25dd0d4130453bc0edc430a35756da8a70645cafba59013d2fd216f28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:51:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:51:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a1a12c25dd0d4130453bc0edc430a35756da8a70645cafba59013d2fd216f28"}
{"level":"info","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a1a12c25dd0d4130453bc0edc430a35756da8a70645cafba59013d2fd216f28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c31f6ae53a21170011f62e93f647ce7c788a3cd520ed1681cf91e69753633ce1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:51:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:51:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c31f6ae53a21170011f62e93f647ce7c788a3cd520ed1681cf91e69753633ce1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c31f6ae53a21170011f62e93f647ce7c788a3cd520ed1681cf91e69753633ce1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ddd7728a30af0ce5c1ed50f9cbdd8b44aeacdd369ed5215481967d231ee4dd6"}
{"level":"debug","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ddd7728a30af0ce5c1ed50f9cbdd8b44aeacdd369ed5215481967d231ee4dd6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a1a12c25dd0d4130453bc0edc430a35756da8a70645cafba59013d2fd216f28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:51:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:51:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a1a12c25dd0d4130453bc0edc430a35756da8a70645cafba59013d2fd216f28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a1a12c25dd0d4130453bc0edc430a35756da8a70645cafba59013d2fd216f28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c31f6ae53a21170011f62e93f647ce7c788a3cd520ed1681cf91e69753633ce1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:51:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:51:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c31f6ae53a21170011f62e93f647ce7c788a3cd520ed1681cf91e69753633ce1"}
{"level":"info","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c31f6ae53a21170011f62e93f647ce7c788a3cd520ed1681cf91e69753633ce1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a1a12c25dd0d4130453bc0edc430a35756da8a70645cafba59013d2fd216f28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:51:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:51:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a1a12c25dd0d4130453bc0edc430a35756da8a70645cafba59013d2fd216f28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c31f6ae53a21170011f62e93f647ce7c788a3cd520ed1681cf91e69753633ce1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:51:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:51:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c31f6ae53a21170011f62e93f647ce7c788a3cd520ed1681cf91e69753633ce1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a1a12c25dd0d4130453bc0edc430a35756da8a70645cafba59013d2fd216f28"}
{"level":"info","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c31f6ae53a21170011f62e93f647ce7c788a3cd520ed1681cf91e69753633ce1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a1a12c25dd0d4130453bc0edc430a35756da8a70645cafba59013d2fd216f28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:51:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:51:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a1a12c25dd0d4130453bc0edc430a35756da8a70645cafba59013d2fd216f28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c31f6ae53a21170011f62e93f647ce7c788a3cd520ed1681cf91e69753633ce1"}
{"level":"info","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a1a12c25dd0d4130453bc0edc430a35756da8a70645cafba59013d2fd216f28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c31f6ae53a21170011f62e93f647ce7c788a3cd520ed1681cf91e69753633ce1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a1a12c25dd0d4130453bc0edc430a35756da8a70645cafba59013d2fd216f28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:51:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:51:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a1a12c25dd0d4130453bc0edc430a35756da8a70645cafba59013d2fd216f28"}
{"level":"info","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a1a12c25dd0d4130453bc0edc430a35756da8a70645cafba59013d2fd216f28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a1a12c25dd0d4130453bc0edc430a35756da8a70645cafba59013d2fd216f28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:51:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:51:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a1a12c25dd0d4130453bc0edc430a35756da8a70645cafba59013d2fd216f28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a1a12c25dd0d4130453bc0edc430a35756da8a70645cafba59013d2fd216f28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a1a12c25dd0d4130453bc0edc430a35756da8a70645cafba59013d2fd216f28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:51:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:51:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a1a12c25dd0d4130453bc0edc430a35756da8a70645cafba59013d2fd216f28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c31f6ae53a21170011f62e93f647ce7c788a3cd520ed1681cf91e69753633ce1"}
{"level":"error","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7a1a12c25dd0d4130453bc0edc430a35756da8a70645cafba59013d2fd216f28","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7a1a12c25dd0d4130453bc0edc430a35756da8a70645cafba59013d2fd216f28\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a1a12c25dd0d4130453bc0edc430a35756da8a70645cafba59013d2fd216f28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:51:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:51:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a1a12c25dd0d4130453bc0edc430a35756da8a70645cafba59013d2fd216f28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a1a12c25dd0d4130453bc0edc430a35756da8a70645cafba59013d2fd216f28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:51:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:51:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7a1a12c25dd0d4130453bc0edc430a35756da8a70645cafba59013d2fd216f28","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7a1a12c25dd0d4130453bc0edc430a35756da8a70645cafba59013d2fd216f28\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a1a12c25dd0d4130453bc0edc430a35756da8a70645cafba59013d2fd216f28","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a1a12c25dd0d4130453bc0edc430a35756da8a70645cafba59013d2fd216f28"}
{"level":"debug","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a1a12c25dd0d4130453bc0edc430a35756da8a70645cafba59013d2fd216f28","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a1a12c25dd0d4130453bc0edc430a35756da8a70645cafba59013d2fd216f28"}
{"level":"debug","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a1a12c25dd0d4130453bc0edc430a35756da8a70645cafba59013d2fd216f28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:51:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:51:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a1a12c25dd0d4130453bc0edc430a35756da8a70645cafba59013d2fd216f28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a1a12c25dd0d4130453bc0edc430a35756da8a70645cafba59013d2fd216f28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a1a12c25dd0d4130453bc0edc430a35756da8a70645cafba59013d2fd216f28","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a1a12c25dd0d4130453bc0edc430a35756da8a70645cafba59013d2fd216f28"}
{"level":"info","ts":"2026-07-09T16:51:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1695d937-16a6-4c62-b8c1-7523cf3aa7c4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:33434","PortSpecifier":{"PortValue":33434}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1695d937-16a6-4c62-b8c1-7523cf3aa7c4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-bef56b.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T16:51:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1695d937-16a6-4c62-b8c1-7523cf3aa7c4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:33434","PortSpecifier":{"PortValue":33434}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783615876,"nanos":579734707},"http":{"id":"1695d937-16a6-4c62-b8c1-7523cf3aa7c4","method":"POST","headers":{":authority":"e2e-shared-a-bef56b.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T16:51:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1695d937-16a6-4c62-b8c1-7523cf3aa7c4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T16:51:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1695d937-16a6-4c62-b8c1-7523cf3aa7c4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"045eab5d-f4e5-44ab-afa6-3765d3a1e600","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fbe0c265-c7ed-4a1c-9972-77fe8f7b4ecb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8c696e1ec923"]}}
{"level":"debug","ts":"2026-07-09T16:51:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1695d937-16a6-4c62-b8c1-7523cf3aa7c4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8c696e1ec923"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fbe0c265-c7ed-4a1c-9972-77fe8f7b4ecb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"045eab5d-f4e5-44ab-afa6-3765d3a1e600","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"043e9366356ee2d3bfa31befc24aaace076873feb55824d159f960993e657d29"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bef56b.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T16:51:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1695d937-16a6-4c62-b8c1-7523cf3aa7c4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:51:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1695d937-16a6-4c62-b8c1-7523cf3aa7c4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:51:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1695d937-16a6-4c62-b8c1-7523cf3aa7c4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bef56b/auth-test-model-bef56b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:51:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1695d937-16a6-4c62-b8c1-7523cf3aa7c4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T16:51:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1695d937-16a6-4c62-b8c1-7523cf3aa7c4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T16:51:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1695d937-16a6-4c62-b8c1-7523cf3aa7c4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-09T16:51:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1695d937-16a6-4c62-b8c1-7523cf3aa7c4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T16:51:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1695d937-16a6-4c62-b8c1-7523cf3aa7c4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T16:51:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7db89e06-d71f-47fa-938b-0d263a08035f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:50392","PortSpecifier":{"PortValue":50392}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7db89e06-d71f-47fa-938b-0d263a08035f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-6bf011.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T16:51:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7db89e06-d71f-47fa-938b-0d263a08035f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:50392","PortSpecifier":{"PortValue":50392}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783615876,"nanos":645262760},"http":{"id":"7db89e06-d71f-47fa-938b-0d263a08035f","method":"POST","headers":{":authority":"e2e-shared-b-6bf011.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T16:51:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7db89e06-d71f-47fa-938b-0d263a08035f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T16:51:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7db89e06-d71f-47fa-938b-0d263a08035f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"045eab5d-f4e5-44ab-afa6-3765d3a1e600","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fbe0c265-c7ed-4a1c-9972-77fe8f7b4ecb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8c696e1ec923"]}}
{"level":"debug","ts":"2026-07-09T16:51:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7db89e06-d71f-47fa-938b-0d263a08035f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8c696e1ec923"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fbe0c265-c7ed-4a1c-9972-77fe8f7b4ecb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"045eab5d-f4e5-44ab-afa6-3765d3a1e600","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"28be827e9e465483c1a86ba02840129ea887a29aa8440b8406050c6a04e723a5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6bf011.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T16:51:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7db89e06-d71f-47fa-938b-0d263a08035f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:51:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7db89e06-d71f-47fa-938b-0d263a08035f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:51:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7db89e06-d71f-47fa-938b-0d263a08035f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6bf011/auth-test-model-6bf011\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:51:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7db89e06-d71f-47fa-938b-0d263a08035f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T16:51:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7db89e06-d71f-47fa-938b-0d263a08035f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T16:51:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7db89e06-d71f-47fa-938b-0d263a08035f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T16:51:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7db89e06-d71f-47fa-938b-0d263a08035f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T16:51:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7db89e06-d71f-47fa-938b-0d263a08035f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T16:51:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b577c599-7893-40d4-b9cd-71d40ae9b3a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:33444","PortSpecifier":{"PortValue":33444}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b577c599-7893-40d4-b9cd-71d40ae9b3a1","method":"GET","path":"/maas-api/v1/api-keys/8d0fa901-bf48-4f4b-a2b6-bed2af7d98ee","host":"e2e-shared-a-bef56b.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T16:51:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b577c599-7893-40d4-b9cd-71d40ae9b3a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:33444","PortSpecifier":{"PortValue":33444}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783615876,"nanos":707867301},"http":{"id":"b577c599-7893-40d4-b9cd-71d40ae9b3a1","method":"GET","headers":{":authority":"e2e-shared-a-bef56b.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/8d0fa901-bf48-4f4b-a2b6-bed2af7d98ee",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T16:51:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b577c599-7893-40d4-b9cd-71d40ae9b3a1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T16:51:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b577c599-7893-40d4-b9cd-71d40ae9b3a1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"045eab5d-f4e5-44ab-afa6-3765d3a1e600","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fbe0c265-c7ed-4a1c-9972-77fe8f7b4ecb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8c696e1ec923"]}}
{"level":"debug","ts":"2026-07-09T16:51:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b577c599-7893-40d4-b9cd-71d40ae9b3a1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8c696e1ec923"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fbe0c265-c7ed-4a1c-9972-77fe8f7b4ecb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"045eab5d-f4e5-44ab-afa6-3765d3a1e600","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"043e9366356ee2d3bfa31befc24aaace076873feb55824d159f960993e657d29"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bef56b.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/8d0fa901-bf48-4f4b-a2b6-bed2af7d98ee",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T16:51:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b577c599-7893-40d4-b9cd-71d40ae9b3a1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:51:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b577c599-7893-40d4-b9cd-71d40ae9b3a1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:51:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b577c599-7893-40d4-b9cd-71d40ae9b3a1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bef56b/auth-test-model-bef56b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:51:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b577c599-7893-40d4-b9cd-71d40ae9b3a1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T16:51:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b577c599-7893-40d4-b9cd-71d40ae9b3a1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T16:51:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b577c599-7893-40d4-b9cd-71d40ae9b3a1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T16:51:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b577c599-7893-40d4-b9cd-71d40ae9b3a1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T16:51:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b577c599-7893-40d4-b9cd-71d40ae9b3a1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T16:51:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e964de40-e14e-4d1e-b815-385b4bea5b4e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:50394","PortSpecifier":{"PortValue":50394}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e964de40-e14e-4d1e-b815-385b4bea5b4e","method":"GET","path":"/maas-api/v1/api-keys/e0f7efe0-7323-493e-8d3a-346a5ae4a72c","host":"e2e-shared-b-6bf011.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T16:51:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e964de40-e14e-4d1e-b815-385b4bea5b4e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:50394","PortSpecifier":{"PortValue":50394}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783615876,"nanos":745397794},"http":{"id":"e964de40-e14e-4d1e-b815-385b4bea5b4e","method":"GET","headers":{":authority":"e2e-shared-b-6bf011.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e0f7efe0-7323-493e-8d3a-346a5ae4a72c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T16:51:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e964de40-e14e-4d1e-b815-385b4bea5b4e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T16:51:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e964de40-e14e-4d1e-b815-385b4bea5b4e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"045eab5d-f4e5-44ab-afa6-3765d3a1e600","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fbe0c265-c7ed-4a1c-9972-77fe8f7b4ecb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8c696e1ec923"]}}
{"level":"debug","ts":"2026-07-09T16:51:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e964de40-e14e-4d1e-b815-385b4bea5b4e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8c696e1ec923"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fbe0c265-c7ed-4a1c-9972-77fe8f7b4ecb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"045eab5d-f4e5-44ab-afa6-3765d3a1e600","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"28be827e9e465483c1a86ba02840129ea887a29aa8440b8406050c6a04e723a5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6bf011.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e0f7efe0-7323-493e-8d3a-346a5ae4a72c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T16:51:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e964de40-e14e-4d1e-b815-385b4bea5b4e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:51:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e964de40-e14e-4d1e-b815-385b4bea5b4e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:51:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e964de40-e14e-4d1e-b815-385b4bea5b4e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6bf011/auth-test-model-6bf011\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:51:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e964de40-e14e-4d1e-b815-385b4bea5b4e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T16:51:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e964de40-e14e-4d1e-b815-385b4bea5b4e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T16:51:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e964de40-e14e-4d1e-b815-385b4bea5b4e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T16:51:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e964de40-e14e-4d1e-b815-385b4bea5b4e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T16:51:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e964de40-e14e-4d1e-b815-385b4bea5b4e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T16:51:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3e67e353-5d12-4c81-9c52-4dfdacc2754a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:60672","PortSpecifier":{"PortValue":60672}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3e67e353-5d12-4c81-9c52-4dfdacc2754a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-bef56b.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T16:51:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3e67e353-5d12-4c81-9c52-4dfdacc2754a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:60672","PortSpecifier":{"PortValue":60672}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783615893,"nanos":913308416},"http":{"id":"3e67e353-5d12-4c81-9c52-4dfdacc2754a","method":"POST","headers":{":authority":"e2e-shared-a-bef56b.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T16:51:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3e67e353-5d12-4c81-9c52-4dfdacc2754a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T16:51:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3e67e353-5d12-4c81-9c52-4dfdacc2754a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"045eab5d-f4e5-44ab-afa6-3765d3a1e600","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fbe0c265-c7ed-4a1c-9972-77fe8f7b4ecb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8c696e1ec923"]}}
{"level":"debug","ts":"2026-07-09T16:51:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3e67e353-5d12-4c81-9c52-4dfdacc2754a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8c696e1ec923"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fbe0c265-c7ed-4a1c-9972-77fe8f7b4ecb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"045eab5d-f4e5-44ab-afa6-3765d3a1e600","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"043e9366356ee2d3bfa31befc24aaace076873feb55824d159f960993e657d29"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bef56b.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T16:51:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e67e353-5d12-4c81-9c52-4dfdacc2754a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:51:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e67e353-5d12-4c81-9c52-4dfdacc2754a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:51:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e67e353-5d12-4c81-9c52-4dfdacc2754a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bef56b/auth-test-model-bef56b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:51:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3e67e353-5d12-4c81-9c52-4dfdacc2754a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T16:51:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3e67e353-5d12-4c81-9c52-4dfdacc2754a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T16:51:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3e67e353-5d12-4c81-9c52-4dfdacc2754a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T16:51:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3e67e353-5d12-4c81-9c52-4dfdacc2754a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T16:51:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3e67e353-5d12-4c81-9c52-4dfdacc2754a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T16:51:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2527093e-f750-44aa-8c5d-e768f5db339e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:46236","PortSpecifier":{"PortValue":46236}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2527093e-f750-44aa-8c5d-e768f5db339e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-6bf011.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T16:51:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2527093e-f750-44aa-8c5d-e768f5db339e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:46236","PortSpecifier":{"PortValue":46236}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783615893,"nanos":955385664},"http":{"id":"2527093e-f750-44aa-8c5d-e768f5db339e","method":"POST","headers":{":authority":"e2e-shared-b-6bf011.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T16:51:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2527093e-f750-44aa-8c5d-e768f5db339e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T16:51:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2527093e-f750-44aa-8c5d-e768f5db339e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"045eab5d-f4e5-44ab-afa6-3765d3a1e600","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fbe0c265-c7ed-4a1c-9972-77fe8f7b4ecb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8c696e1ec923"]}}
{"level":"debug","ts":"2026-07-09T16:51:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2527093e-f750-44aa-8c5d-e768f5db339e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8c696e1ec923"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fbe0c265-c7ed-4a1c-9972-77fe8f7b4ecb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"045eab5d-f4e5-44ab-afa6-3765d3a1e600","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"28be827e9e465483c1a86ba02840129ea887a29aa8440b8406050c6a04e723a5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6bf011.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T16:51:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2527093e-f750-44aa-8c5d-e768f5db339e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:51:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2527093e-f750-44aa-8c5d-e768f5db339e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:51:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2527093e-f750-44aa-8c5d-e768f5db339e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6bf011/auth-test-model-6bf011\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:51:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2527093e-f750-44aa-8c5d-e768f5db339e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T16:51:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2527093e-f750-44aa-8c5d-e768f5db339e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T16:51:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2527093e-f750-44aa-8c5d-e768f5db339e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-09T16:51:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2527093e-f750-44aa-8c5d-e768f5db339e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T16:51:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2527093e-f750-44aa-8c5d-e768f5db339e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T16:51:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ef40422-f811-42b9-a349-6ab62a878e3c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:60680","PortSpecifier":{"PortValue":60680}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8ef40422-f811-42b9-a349-6ab62a878e3c","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-bef56b.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T16:51:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ef40422-f811-42b9-a349-6ab62a878e3c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:60680","PortSpecifier":{"PortValue":60680}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783615893,"nanos":994678648},"http":{"id":"8ef40422-f811-42b9-a349-6ab62a878e3c","method":"GET","headers":{":authority":"e2e-shared-a-bef56b.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T16:51:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8ef40422-f811-42b9-a349-6ab62a878e3c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-zqaGNz0S7p48YOBM_dQ4rJijz90XSKPK94SB9HtjqGbURqCNqqDETSEgPrcM"}
{"level":"debug","ts":"2026-07-09T16:51:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8ef40422-f811-42b9-a349-6ab62a878e3c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bef56b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-zqaGNz0S7p48YOBM_dQ4rJijz90XSKPK94SB9HtjqGbURqCNqqDETSEgPrcM\"}"}
{"level":"debug","ts":"2026-07-09T16:51:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8ef40422-f811-42b9-a349-6ab62a878e3c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bef56b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c6163a91-c5c9-4a63-bc63-f99256a981de","keyName":"e2e-auth-iso-a-6eb95a","subscription":"e2e-auth-iso-069898","tenant":"e2e-shared-a-bef56b","userId":"c6163a91-c5c9-4a63-bc63-f99256a981de","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T16:51:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8ef40422-f811-42b9-a349-6ab62a878e3c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T16:51:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ef40422-f811-42b9-a349-6ab62a878e3c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:51:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ef40422-f811-42b9-a349-6ab62a878e3c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:51:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ef40422-f811-42b9-a349-6ab62a878e3c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bef56b/auth-test-model-bef56b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:51:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8ef40422-f811-42b9-a349-6ab62a878e3c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-09T16:51:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ef40422-f811-42b9-a349-6ab62a878e3c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-069898"}
{"level":"debug","ts":"2026-07-09T16:51:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ef40422-f811-42b9-a349-6ab62a878e3c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T16:51:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ef40422-f811-42b9-a349-6ab62a878e3c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T16:51:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ef40422-f811-42b9-a349-6ab62a878e3c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T16:51:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ef40422-f811-42b9-a349-6ab62a878e3c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T16:51:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"447ea331-aaad-9775-b080-ab0242d0df18","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:53114","PortSpecifier":{"PortValue":53114}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"447ea331-aaad-9775-b080-ab0242d0df18","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-bef56b.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T16:51:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"447ea331-aaad-9775-b080-ab0242d0df18","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:53114","PortSpecifier":{"PortValue":53114}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783615911,"nanos":171345142},"http":{"id":"447ea331-aaad-9775-b080-ab0242d0df18","method":"POST","headers":{":authority":"e2e-shared-a-bef56b.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T16:51:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"447ea331-aaad-9775-b080-ab0242d0df18","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T16:51:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"447ea331-aaad-9775-b080-ab0242d0df18","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"045eab5d-f4e5-44ab-afa6-3765d3a1e600","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fbe0c265-c7ed-4a1c-9972-77fe8f7b4ecb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8c696e1ec923"]}}
{"level":"debug","ts":"2026-07-09T16:51:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"447ea331-aaad-9775-b080-ab0242d0df18","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8c696e1ec923"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fbe0c265-c7ed-4a1c-9972-77fe8f7b4ecb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"045eab5d-f4e5-44ab-afa6-3765d3a1e600","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"043e9366356ee2d3bfa31befc24aaace076873feb55824d159f960993e657d29"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bef56b.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T16:51:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"447ea331-aaad-9775-b080-ab0242d0df18","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:51:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"447ea331-aaad-9775-b080-ab0242d0df18","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:51:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"447ea331-aaad-9775-b080-ab0242d0df18","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bef56b/auth-test-model-bef56b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:51:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"447ea331-aaad-9775-b080-ab0242d0df18","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T16:51:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"447ea331-aaad-9775-b080-ab0242d0df18","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T16:51:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"447ea331-aaad-9775-b080-ab0242d0df18","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T16:51:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"447ea331-aaad-9775-b080-ab0242d0df18","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T16:51:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"447ea331-aaad-9775-b080-ab0242d0df18","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T16:51:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"12dbf9ff-9373-4f46-9138-4667ad7b9292","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:60768","PortSpecifier":{"PortValue":60768}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"12dbf9ff-9373-4f46-9138-4667ad7b9292","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-6bf011.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T16:51:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"12dbf9ff-9373-4f46-9138-4667ad7b9292","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:60768","PortSpecifier":{"PortValue":60768}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783615911,"nanos":230260740},"http":{"id":"12dbf9ff-9373-4f46-9138-4667ad7b9292","method":"POST","headers":{":authority":"e2e-shared-b-6bf011.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T16:51:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"12dbf9ff-9373-4f46-9138-4667ad7b9292","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T16:51:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"12dbf9ff-9373-4f46-9138-4667ad7b9292","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"045eab5d-f4e5-44ab-afa6-3765d3a1e600","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fbe0c265-c7ed-4a1c-9972-77fe8f7b4ecb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8c696e1ec923"]}}
{"level":"debug","ts":"2026-07-09T16:51:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"12dbf9ff-9373-4f46-9138-4667ad7b9292","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8c696e1ec923"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fbe0c265-c7ed-4a1c-9972-77fe8f7b4ecb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"045eab5d-f4e5-44ab-afa6-3765d3a1e600","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"28be827e9e465483c1a86ba02840129ea887a29aa8440b8406050c6a04e723a5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6bf011.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T16:51:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"12dbf9ff-9373-4f46-9138-4667ad7b9292","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:51:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"12dbf9ff-9373-4f46-9138-4667ad7b9292","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:51:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"12dbf9ff-9373-4f46-9138-4667ad7b9292","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6bf011/auth-test-model-6bf011\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:51:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"12dbf9ff-9373-4f46-9138-4667ad7b9292","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T16:51:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"12dbf9ff-9373-4f46-9138-4667ad7b9292","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T16:51:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"12dbf9ff-9373-4f46-9138-4667ad7b9292","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-09T16:51:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"12dbf9ff-9373-4f46-9138-4667ad7b9292","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T16:51:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"12dbf9ff-9373-4f46-9138-4667ad7b9292","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T16:51:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1f03e920-905e-42c8-a94e-642a82bf710d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:60770","PortSpecifier":{"PortValue":60770}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1f03e920-905e-42c8-a94e-642a82bf710d","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-6bf011.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T16:51:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1f03e920-905e-42c8-a94e-642a82bf710d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:60770","PortSpecifier":{"PortValue":60770}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783615911,"nanos":269369637},"http":{"id":"1f03e920-905e-42c8-a94e-642a82bf710d","method":"GET","headers":{":authority":"e2e-shared-b-6bf011.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T16:51:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1f03e920-905e-42c8-a94e-642a82bf710d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GbAyGqD7NQCljyP1_8iOrpnT9WgruUFrCeZSdyECLOn5vyWUqdKghWQuEI5O"}
{"level":"debug","ts":"2026-07-09T16:51:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1f03e920-905e-42c8-a94e-642a82bf710d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-6bf011.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GbAyGqD7NQCljyP1_8iOrpnT9WgruUFrCeZSdyECLOn5vyWUqdKghWQuEI5O\"}"}
{"level":"debug","ts":"2026-07-09T16:51:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1f03e920-905e-42c8-a94e-642a82bf710d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-6bf011.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-09T16:51:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1f03e920-905e-42c8-a94e-642a82bf710d","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"28be827e9e465483c1a86ba02840129ea887a29aa8440b8406050c6a04e723a5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6bf011.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T16:51:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"1f03e920-905e-42c8-a94e-642a82bf710d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-09T16:51:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1f03e920-905e-42c8-a94e-642a82bf710d","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-09T16:51:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1f03e920-905e-42c8-a94e-642a82bf710d","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-09T16:52:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"03b118b1-d2bd-4131-bbfc-6acac20cb115","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:54830","PortSpecifier":{"PortValue":54830}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"03b118b1-d2bd-4131-bbfc-6acac20cb115","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-bef56b.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T16:52:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"03b118b1-d2bd-4131-bbfc-6acac20cb115","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:54830","PortSpecifier":{"PortValue":54830}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783615930,"nanos":556706087},"http":{"id":"03b118b1-d2bd-4131-bbfc-6acac20cb115","method":"POST","headers":{":authority":"e2e-shared-a-bef56b.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T16:52:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"03b118b1-d2bd-4131-bbfc-6acac20cb115","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T16:52:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"03b118b1-d2bd-4131-bbfc-6acac20cb115","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"045eab5d-f4e5-44ab-afa6-3765d3a1e600","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fbe0c265-c7ed-4a1c-9972-77fe8f7b4ecb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8c696e1ec923"]}}
{"level":"debug","ts":"2026-07-09T16:52:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"03b118b1-d2bd-4131-bbfc-6acac20cb115","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8c696e1ec923"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fbe0c265-c7ed-4a1c-9972-77fe8f7b4ecb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"045eab5d-f4e5-44ab-afa6-3765d3a1e600","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"043e9366356ee2d3bfa31befc24aaace076873feb55824d159f960993e657d29"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bef56b.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T16:52:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03b118b1-d2bd-4131-bbfc-6acac20cb115","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:52:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03b118b1-d2bd-4131-bbfc-6acac20cb115","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:52:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03b118b1-d2bd-4131-bbfc-6acac20cb115","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bef56b/auth-test-model-bef56b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:52:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"03b118b1-d2bd-4131-bbfc-6acac20cb115","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T16:52:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03b118b1-d2bd-4131-bbfc-6acac20cb115","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T16:52:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03b118b1-d2bd-4131-bbfc-6acac20cb115","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T16:52:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"03b118b1-d2bd-4131-bbfc-6acac20cb115","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T16:52:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"03b118b1-d2bd-4131-bbfc-6acac20cb115","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T16:52:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"12e6a6df-4f10-4fdc-a8dd-7c04ab3b6c51","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:33022","PortSpecifier":{"PortValue":33022}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"12e6a6df-4f10-4fdc-a8dd-7c04ab3b6c51","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-6bf011.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T16:52:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"12e6a6df-4f10-4fdc-a8dd-7c04ab3b6c51","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:33022","PortSpecifier":{"PortValue":33022}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783615930,"nanos":596868421},"http":{"id":"12e6a6df-4f10-4fdc-a8dd-7c04ab3b6c51","method":"POST","headers":{":authority":"e2e-shared-b-6bf011.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T16:52:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"12e6a6df-4f10-4fdc-a8dd-7c04ab3b6c51","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T16:52:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"12e6a6df-4f10-4fdc-a8dd-7c04ab3b6c51","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"045eab5d-f4e5-44ab-afa6-3765d3a1e600","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fbe0c265-c7ed-4a1c-9972-77fe8f7b4ecb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8c696e1ec923"]}}
{"level":"debug","ts":"2026-07-09T16:52:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"12e6a6df-4f10-4fdc-a8dd-7c04ab3b6c51","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8c696e1ec923"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fbe0c265-c7ed-4a1c-9972-77fe8f7b4ecb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"045eab5d-f4e5-44ab-afa6-3765d3a1e600","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"28be827e9e465483c1a86ba02840129ea887a29aa8440b8406050c6a04e723a5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6bf011.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T16:52:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"12e6a6df-4f10-4fdc-a8dd-7c04ab3b6c51","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:52:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"12e6a6df-4f10-4fdc-a8dd-7c04ab3b6c51","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:52:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"12e6a6df-4f10-4fdc-a8dd-7c04ab3b6c51","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6bf011/auth-test-model-6bf011\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:52:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"12e6a6df-4f10-4fdc-a8dd-7c04ab3b6c51","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T16:52:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"12e6a6df-4f10-4fdc-a8dd-7c04ab3b6c51","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T16:52:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"12e6a6df-4f10-4fdc-a8dd-7c04ab3b6c51","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T16:52:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"12e6a6df-4f10-4fdc-a8dd-7c04ab3b6c51","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T16:52:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"12e6a6df-4f10-4fdc-a8dd-7c04ab3b6c51","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T16:52:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"70e1d10d-be6b-4876-9101-190b9ef9099b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:54840","PortSpecifier":{"PortValue":54840}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"70e1d10d-be6b-4876-9101-190b9ef9099b","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-bef56b.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T16:52:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"70e1d10d-be6b-4876-9101-190b9ef9099b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:54840","PortSpecifier":{"PortValue":54840}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783615930,"nanos":642607429},"http":{"id":"70e1d10d-be6b-4876-9101-190b9ef9099b","method":"POST","headers":{":authority":"e2e-shared-a-bef56b.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T16:52:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"70e1d10d-be6b-4876-9101-190b9ef9099b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T16:52:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"70e1d10d-be6b-4876-9101-190b9ef9099b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"045eab5d-f4e5-44ab-afa6-3765d3a1e600","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fbe0c265-c7ed-4a1c-9972-77fe8f7b4ecb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8c696e1ec923"]}}
{"level":"debug","ts":"2026-07-09T16:52:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"70e1d10d-be6b-4876-9101-190b9ef9099b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8c696e1ec923"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fbe0c265-c7ed-4a1c-9972-77fe8f7b4ecb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"045eab5d-f4e5-44ab-afa6-3765d3a1e600","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"043e9366356ee2d3bfa31befc24aaace076873feb55824d159f960993e657d29"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bef56b.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T16:52:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70e1d10d-be6b-4876-9101-190b9ef9099b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:52:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70e1d10d-be6b-4876-9101-190b9ef9099b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:52:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70e1d10d-be6b-4876-9101-190b9ef9099b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bef56b/auth-test-model-bef56b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:52:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"70e1d10d-be6b-4876-9101-190b9ef9099b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T16:52:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"70e1d10d-be6b-4876-9101-190b9ef9099b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T16:52:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"70e1d10d-be6b-4876-9101-190b9ef9099b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-09T16:52:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"70e1d10d-be6b-4876-9101-190b9ef9099b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T16:52:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"70e1d10d-be6b-4876-9101-190b9ef9099b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T16:52:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"add30146-8c3c-4530-86ea-d6027230eab7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:33030","PortSpecifier":{"PortValue":33030}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"add30146-8c3c-4530-86ea-d6027230eab7","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-6bf011.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T16:52:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"add30146-8c3c-4530-86ea-d6027230eab7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:33030","PortSpecifier":{"PortValue":33030}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783615930,"nanos":695922411},"http":{"id":"add30146-8c3c-4530-86ea-d6027230eab7","method":"POST","headers":{":authority":"e2e-shared-b-6bf011.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T16:52:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"add30146-8c3c-4530-86ea-d6027230eab7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T16:52:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"add30146-8c3c-4530-86ea-d6027230eab7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"045eab5d-f4e5-44ab-afa6-3765d3a1e600","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fbe0c265-c7ed-4a1c-9972-77fe8f7b4ecb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8c696e1ec923"]}}
{"level":"debug","ts":"2026-07-09T16:52:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"add30146-8c3c-4530-86ea-d6027230eab7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8c696e1ec923"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fbe0c265-c7ed-4a1c-9972-77fe8f7b4ecb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"045eab5d-f4e5-44ab-afa6-3765d3a1e600","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"28be827e9e465483c1a86ba02840129ea887a29aa8440b8406050c6a04e723a5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6bf011.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T16:52:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"add30146-8c3c-4530-86ea-d6027230eab7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:52:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"add30146-8c3c-4530-86ea-d6027230eab7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:52:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"add30146-8c3c-4530-86ea-d6027230eab7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6bf011/auth-test-model-6bf011\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:52:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"add30146-8c3c-4530-86ea-d6027230eab7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T16:52:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"add30146-8c3c-4530-86ea-d6027230eab7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T16:52:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"add30146-8c3c-4530-86ea-d6027230eab7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T16:52:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"add30146-8c3c-4530-86ea-d6027230eab7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T16:52:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"add30146-8c3c-4530-86ea-d6027230eab7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T16:52:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7315eb3e-8ddd-4980-becb-5e1bc745a504","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:57778","PortSpecifier":{"PortValue":57778}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7315eb3e-8ddd-4980-becb-5e1bc745a504","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-bef56b.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T16:52:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7315eb3e-8ddd-4980-becb-5e1bc745a504","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:57778","PortSpecifier":{"PortValue":57778}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783615947,"nanos":860750063},"http":{"id":"7315eb3e-8ddd-4980-becb-5e1bc745a504","method":"POST","headers":{":authority":"e2e-shared-a-bef56b.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T16:52:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7315eb3e-8ddd-4980-becb-5e1bc745a504","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T16:52:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7315eb3e-8ddd-4980-becb-5e1bc745a504","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"045eab5d-f4e5-44ab-afa6-3765d3a1e600","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fbe0c265-c7ed-4a1c-9972-77fe8f7b4ecb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8c696e1ec923"]}}
{"level":"debug","ts":"2026-07-09T16:52:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7315eb3e-8ddd-4980-becb-5e1bc745a504","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8c696e1ec923"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fbe0c265-c7ed-4a1c-9972-77fe8f7b4ecb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"045eab5d-f4e5-44ab-afa6-3765d3a1e600","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"043e9366356ee2d3bfa31befc24aaace076873feb55824d159f960993e657d29"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bef56b.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T16:52:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7315eb3e-8ddd-4980-becb-5e1bc745a504","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:52:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7315eb3e-8ddd-4980-becb-5e1bc745a504","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:52:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7315eb3e-8ddd-4980-becb-5e1bc745a504","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bef56b/auth-test-model-bef56b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:52:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7315eb3e-8ddd-4980-becb-5e1bc745a504","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T16:52:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7315eb3e-8ddd-4980-becb-5e1bc745a504","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T16:52:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7315eb3e-8ddd-4980-becb-5e1bc745a504","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T16:52:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7315eb3e-8ddd-4980-becb-5e1bc745a504","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T16:52:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7315eb3e-8ddd-4980-becb-5e1bc745a504","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T16:52:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"47878cbc-6389-42e2-96cb-4cc3b71a85f3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:44078","PortSpecifier":{"PortValue":44078}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"47878cbc-6389-42e2-96cb-4cc3b71a85f3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-6bf011.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T16:52:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"47878cbc-6389-42e2-96cb-4cc3b71a85f3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:44078","PortSpecifier":{"PortValue":44078}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783615947,"nanos":895928627},"http":{"id":"47878cbc-6389-42e2-96cb-4cc3b71a85f3","method":"POST","headers":{":authority":"e2e-shared-b-6bf011.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T16:52:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"47878cbc-6389-42e2-96cb-4cc3b71a85f3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T16:52:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"47878cbc-6389-42e2-96cb-4cc3b71a85f3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"045eab5d-f4e5-44ab-afa6-3765d3a1e600","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fbe0c265-c7ed-4a1c-9972-77fe8f7b4ecb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8c696e1ec923"]}}
{"level":"debug","ts":"2026-07-09T16:52:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"47878cbc-6389-42e2-96cb-4cc3b71a85f3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8c696e1ec923"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fbe0c265-c7ed-4a1c-9972-77fe8f7b4ecb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"045eab5d-f4e5-44ab-afa6-3765d3a1e600","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"28be827e9e465483c1a86ba02840129ea887a29aa8440b8406050c6a04e723a5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6bf011.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T16:52:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47878cbc-6389-42e2-96cb-4cc3b71a85f3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:52:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47878cbc-6389-42e2-96cb-4cc3b71a85f3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:52:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47878cbc-6389-42e2-96cb-4cc3b71a85f3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6bf011/auth-test-model-6bf011\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:52:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"47878cbc-6389-42e2-96cb-4cc3b71a85f3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T16:52:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47878cbc-6389-42e2-96cb-4cc3b71a85f3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T16:52:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47878cbc-6389-42e2-96cb-4cc3b71a85f3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T16:52:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"47878cbc-6389-42e2-96cb-4cc3b71a85f3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T16:52:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"47878cbc-6389-42e2-96cb-4cc3b71a85f3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T16:52:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d9c20b3f-e87a-4829-84b7-38a51acccef7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:44094","PortSpecifier":{"PortValue":44094}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d9c20b3f-e87a-4829-84b7-38a51acccef7","method":"GET","path":"/maas-api/v1/api-keys/6e6b5589-7b85-4c0d-97a1-bacf5a965e7b","host":"e2e-shared-b-6bf011.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T16:52:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d9c20b3f-e87a-4829-84b7-38a51acccef7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:44094","PortSpecifier":{"PortValue":44094}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783615947,"nanos":931290641},"http":{"id":"d9c20b3f-e87a-4829-84b7-38a51acccef7","method":"GET","headers":{":authority":"e2e-shared-b-6bf011.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/6e6b5589-7b85-4c0d-97a1-bacf5a965e7b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T16:52:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d9c20b3f-e87a-4829-84b7-38a51acccef7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T16:52:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d9c20b3f-e87a-4829-84b7-38a51acccef7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"045eab5d-f4e5-44ab-afa6-3765d3a1e600","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fbe0c265-c7ed-4a1c-9972-77fe8f7b4ecb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8c696e1ec923"]}}
{"level":"debug","ts":"2026-07-09T16:52:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d9c20b3f-e87a-4829-84b7-38a51acccef7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8c696e1ec923"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fbe0c265-c7ed-4a1c-9972-77fe8f7b4ecb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"045eab5d-f4e5-44ab-afa6-3765d3a1e600","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"28be827e9e465483c1a86ba02840129ea887a29aa8440b8406050c6a04e723a5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6bf011.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/6e6b5589-7b85-4c0d-97a1-bacf5a965e7b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T16:52:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9c20b3f-e87a-4829-84b7-38a51acccef7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:52:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9c20b3f-e87a-4829-84b7-38a51acccef7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:52:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9c20b3f-e87a-4829-84b7-38a51acccef7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6bf011/auth-test-model-6bf011\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:52:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d9c20b3f-e87a-4829-84b7-38a51acccef7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T16:52:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d9c20b3f-e87a-4829-84b7-38a51acccef7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T16:52:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d9c20b3f-e87a-4829-84b7-38a51acccef7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T16:52:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d9c20b3f-e87a-4829-84b7-38a51acccef7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T16:52:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d9c20b3f-e87a-4829-84b7-38a51acccef7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T16:52:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"59c30b6b-dedd-403c-a8fe-056845cfdb41","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:57794","PortSpecifier":{"PortValue":57794}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"59c30b6b-dedd-403c-a8fe-056845cfdb41","method":"GET","path":"/maas-api/v1/api-keys/6e6b5589-7b85-4c0d-97a1-bacf5a965e7b","host":"e2e-shared-a-bef56b.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T16:52:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"59c30b6b-dedd-403c-a8fe-056845cfdb41","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:57794","PortSpecifier":{"PortValue":57794}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783615947,"nanos":965289062},"http":{"id":"59c30b6b-dedd-403c-a8fe-056845cfdb41","method":"GET","headers":{":authority":"e2e-shared-a-bef56b.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/6e6b5589-7b85-4c0d-97a1-bacf5a965e7b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T16:52:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"59c30b6b-dedd-403c-a8fe-056845cfdb41","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T16:52:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"59c30b6b-dedd-403c-a8fe-056845cfdb41","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"045eab5d-f4e5-44ab-afa6-3765d3a1e600","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fbe0c265-c7ed-4a1c-9972-77fe8f7b4ecb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8c696e1ec923"]}}
{"level":"debug","ts":"2026-07-09T16:52:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"59c30b6b-dedd-403c-a8fe-056845cfdb41","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8c696e1ec923"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fbe0c265-c7ed-4a1c-9972-77fe8f7b4ecb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"045eab5d-f4e5-44ab-afa6-3765d3a1e600","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"043e9366356ee2d3bfa31befc24aaace076873feb55824d159f960993e657d29"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bef56b.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/6e6b5589-7b85-4c0d-97a1-bacf5a965e7b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T16:52:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59c30b6b-dedd-403c-a8fe-056845cfdb41","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:52:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59c30b6b-dedd-403c-a8fe-056845cfdb41","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:52:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59c30b6b-dedd-403c-a8fe-056845cfdb41","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bef56b/auth-test-model-bef56b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:52:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"59c30b6b-dedd-403c-a8fe-056845cfdb41","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T16:52:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59c30b6b-dedd-403c-a8fe-056845cfdb41","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T16:52:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59c30b6b-dedd-403c-a8fe-056845cfdb41","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T16:52:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"59c30b6b-dedd-403c-a8fe-056845cfdb41","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T16:52:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"59c30b6b-dedd-403c-a8fe-056845cfdb41","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T16:52:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"252d050b-d6ae-428b-84ae-0ec2513c58f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:39884","PortSpecifier":{"PortValue":39884}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"252d050b-d6ae-428b-84ae-0ec2513c58f2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-bef56b.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T16:52:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"252d050b-d6ae-428b-84ae-0ec2513c58f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:39884","PortSpecifier":{"PortValue":39884}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783615965,"nanos":116962418},"http":{"id":"252d050b-d6ae-428b-84ae-0ec2513c58f2","method":"POST","headers":{":authority":"e2e-shared-a-bef56b.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T16:52:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"252d050b-d6ae-428b-84ae-0ec2513c58f2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T16:52:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"252d050b-d6ae-428b-84ae-0ec2513c58f2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"045eab5d-f4e5-44ab-afa6-3765d3a1e600","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fbe0c265-c7ed-4a1c-9972-77fe8f7b4ecb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8c696e1ec923"]}}
{"level":"debug","ts":"2026-07-09T16:52:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"252d050b-d6ae-428b-84ae-0ec2513c58f2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8c696e1ec923"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fbe0c265-c7ed-4a1c-9972-77fe8f7b4ecb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"045eab5d-f4e5-44ab-afa6-3765d3a1e600","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"043e9366356ee2d3bfa31befc24aaace076873feb55824d159f960993e657d29"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bef56b.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T16:52:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"252d050b-d6ae-428b-84ae-0ec2513c58f2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:52:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"252d050b-d6ae-428b-84ae-0ec2513c58f2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:52:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"252d050b-d6ae-428b-84ae-0ec2513c58f2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bef56b/auth-test-model-bef56b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:52:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"252d050b-d6ae-428b-84ae-0ec2513c58f2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T16:52:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"252d050b-d6ae-428b-84ae-0ec2513c58f2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T16:52:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"252d050b-d6ae-428b-84ae-0ec2513c58f2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T16:52:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"252d050b-d6ae-428b-84ae-0ec2513c58f2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T16:52:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"252d050b-d6ae-428b-84ae-0ec2513c58f2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T16:52:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"704723b6-71e4-4b47-8db4-f643b05bd2a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:59916","PortSpecifier":{"PortValue":59916}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"704723b6-71e4-4b47-8db4-f643b05bd2a1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-6bf011.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T16:52:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"704723b6-71e4-4b47-8db4-f643b05bd2a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:59916","PortSpecifier":{"PortValue":59916}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783615965,"nanos":152235358},"http":{"id":"704723b6-71e4-4b47-8db4-f643b05bd2a1","method":"POST","headers":{":authority":"e2e-shared-b-6bf011.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T16:52:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"704723b6-71e4-4b47-8db4-f643b05bd2a1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T16:52:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"704723b6-71e4-4b47-8db4-f643b05bd2a1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"045eab5d-f4e5-44ab-afa6-3765d3a1e600","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fbe0c265-c7ed-4a1c-9972-77fe8f7b4ecb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8c696e1ec923"]}}
{"level":"debug","ts":"2026-07-09T16:52:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"704723b6-71e4-4b47-8db4-f643b05bd2a1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8c696e1ec923"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fbe0c265-c7ed-4a1c-9972-77fe8f7b4ecb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"045eab5d-f4e5-44ab-afa6-3765d3a1e600","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"28be827e9e465483c1a86ba02840129ea887a29aa8440b8406050c6a04e723a5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6bf011.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T16:52:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"704723b6-71e4-4b47-8db4-f643b05bd2a1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:52:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"704723b6-71e4-4b47-8db4-f643b05bd2a1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:52:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"704723b6-71e4-4b47-8db4-f643b05bd2a1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6bf011/auth-test-model-6bf011\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:52:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"704723b6-71e4-4b47-8db4-f643b05bd2a1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T16:52:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"704723b6-71e4-4b47-8db4-f643b05bd2a1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T16:52:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"704723b6-71e4-4b47-8db4-f643b05bd2a1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T16:52:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"704723b6-71e4-4b47-8db4-f643b05bd2a1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T16:52:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"704723b6-71e4-4b47-8db4-f643b05bd2a1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T16:52:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c13e6783-a078-4ceb-b31b-3f273e2226e4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:39890","PortSpecifier":{"PortValue":39890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c13e6783-a078-4ceb-b31b-3f273e2226e4","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-bef56b.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T16:52:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c13e6783-a078-4ceb-b31b-3f273e2226e4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:39890","PortSpecifier":{"PortValue":39890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783615965,"nanos":188521869},"http":{"id":"c13e6783-a078-4ceb-b31b-3f273e2226e4","method":"POST","headers":{":authority":"e2e-shared-a-bef56b.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T16:52:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c13e6783-a078-4ceb-b31b-3f273e2226e4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-11nIvXOXutX9I90WN_1RdZwH18klhASQMIvTQXhBJeTFLZ5pgHEsBOTl4omdv"}
{"level":"debug","ts":"2026-07-09T16:52:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c13e6783-a078-4ceb-b31b-3f273e2226e4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bef56b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-11nIvXOXutX9I90WN_1RdZwH18klhASQMIvTQXhBJeTFLZ5pgHEsBOTl4omdv\"}"}
{"level":"debug","ts":"2026-07-09T16:52:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c13e6783-a078-4ceb-b31b-3f273e2226e4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bef56b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6f96d9c1-cb0c-4257-aa5c-68d2ff844c6b","keyName":"e2e-auth-iso-a-6fb1a8","subscription":"e2e-auth-iso-a57e6b","tenant":"e2e-shared-a-bef56b","userId":"6f96d9c1-cb0c-4257-aa5c-68d2ff844c6b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T16:52:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c13e6783-a078-4ceb-b31b-3f273e2226e4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T16:52:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c13e6783-a078-4ceb-b31b-3f273e2226e4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:52:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c13e6783-a078-4ceb-b31b-3f273e2226e4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:52:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c13e6783-a078-4ceb-b31b-3f273e2226e4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bef56b/auth-test-model-bef56b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:52:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c13e6783-a078-4ceb-b31b-3f273e2226e4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-09T16:52:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c13e6783-a078-4ceb-b31b-3f273e2226e4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T16:52:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c13e6783-a078-4ceb-b31b-3f273e2226e4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T16:52:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c13e6783-a078-4ceb-b31b-3f273e2226e4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-a57e6b"}
{"level":"info","ts":"2026-07-09T16:52:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c13e6783-a078-4ceb-b31b-3f273e2226e4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T16:52:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c13e6783-a078-4ceb-b31b-3f273e2226e4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T16:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/158228ac8a151bb5813b21f2a41cf6a5400921c42ab2734a7524ff93cc618072"}
{"level":"info","ts":"2026-07-09T16:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5719453ee65b093795ce693559bddbbdd14035cc18f74226c2c2a3a4c10ebdc4"}
{"level":"info","ts":"2026-07-09T16:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f786c35b6cebc95aa919334d38bf141df7610608f5242daa958cb5a03bc30122"}
{"level":"info","ts":"2026-07-09T16:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0dcae7ba77ebb918f91c361c870094b4d0ec68f8fef0bd3f4bea654f1f532e01"}
{"level":"info","ts":"2026-07-09T16:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1241ca0ea8ce4428714b297f4e8e2a22e38bedbfaadf6ac9252fa3c6ab996fdb"}
{"level":"info","ts":"2026-07-09T16:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/942f2dcc59383aacdf18b6c002924d0e70b47618190fd93765c47c784551fbb8"}
{"level":"info","ts":"2026-07-09T16:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5509c857edeee41ea7bfa66f7f746e7b95dd45adfb62c41446b712e26555679e"}
{"level":"info","ts":"2026-07-09T16:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/24ad76e99d3db98bf6fa7232633cce33030793f671aa8ebe4e9db414ffdf1b84"}
{"level":"debug","ts":"2026-07-09T16:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d3c027a99c29975cb300025ae2e0980a4883f7e86edddb73ae7dafbc4598813","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:53:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:53:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d3c027a99c29975cb300025ae2e0980a4883f7e86edddb73ae7dafbc4598813","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d3c027a99c29975cb300025ae2e0980a4883f7e86edddb73ae7dafbc4598813","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:53:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:53:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d3c027a99c29975cb300025ae2e0980a4883f7e86edddb73ae7dafbc4598813"}
{"level":"info","ts":"2026-07-09T16:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d3c027a99c29975cb300025ae2e0980a4883f7e86edddb73ae7dafbc4598813","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d3c027a99c29975cb300025ae2e0980a4883f7e86edddb73ae7dafbc4598813","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:53:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:53:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-09T16:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3d3c027a99c29975cb300025ae2e0980a4883f7e86edddb73ae7dafbc4598813","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3d3c027a99c29975cb300025ae2e0980a4883f7e86edddb73ae7dafbc4598813\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T16:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d3c027a99c29975cb300025ae2e0980a4883f7e86edddb73ae7dafbc4598813","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d3c027a99c29975cb300025ae2e0980a4883f7e86edddb73ae7dafbc4598813","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d3c027a99c29975cb300025ae2e0980a4883f7e86edddb73ae7dafbc4598813"}
{"level":"info","ts":"2026-07-09T16:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d3c027a99c29975cb300025ae2e0980a4883f7e86edddb73ae7dafbc4598813"}
{"level":"debug","ts":"2026-07-09T16:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d3c027a99c29975cb300025ae2e0980a4883f7e86edddb73ae7dafbc4598813","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:53:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:53:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d3c027a99c29975cb300025ae2e0980a4883f7e86edddb73ae7dafbc4598813"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d3c027a99c29975cb300025ae2e0980a4883f7e86edddb73ae7dafbc4598813","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d3c027a99c29975cb300025ae2e0980a4883f7e86edddb73ae7dafbc4598813","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:53:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:53:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d3c027a99c29975cb300025ae2e0980a4883f7e86edddb73ae7dafbc4598813","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d3c027a99c29975cb300025ae2e0980a4883f7e86edddb73ae7dafbc4598813","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d3c027a99c29975cb300025ae2e0980a4883f7e86edddb73ae7dafbc4598813","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d3c027a99c29975cb300025ae2e0980a4883f7e86edddb73ae7dafbc4598813"}
{"level":"debug","ts":"2026-07-09T16:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d3c027a99c29975cb300025ae2e0980a4883f7e86edddb73ae7dafbc4598813","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d3c027a99c29975cb300025ae2e0980a4883f7e86edddb73ae7dafbc4598813"}
{"level":"debug","ts":"2026-07-09T16:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d3c027a99c29975cb300025ae2e0980a4883f7e86edddb73ae7dafbc4598813","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:53:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:53:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d3c027a99c29975cb300025ae2e0980a4883f7e86edddb73ae7dafbc4598813"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d3c027a99c29975cb300025ae2e0980a4883f7e86edddb73ae7dafbc4598813","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d3c027a99c29975cb300025ae2e0980a4883f7e86edddb73ae7dafbc4598813","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:53:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:53:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d3c027a99c29975cb300025ae2e0980a4883f7e86edddb73ae7dafbc4598813","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d3c027a99c29975cb300025ae2e0980a4883f7e86edddb73ae7dafbc4598813","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d3c027a99c29975cb300025ae2e0980a4883f7e86edddb73ae7dafbc4598813","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d3c027a99c29975cb300025ae2e0980a4883f7e86edddb73ae7dafbc4598813"}
{"level":"debug","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d3c027a99c29975cb300025ae2e0980a4883f7e86edddb73ae7dafbc4598813","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d3c027a99c29975cb300025ae2e0980a4883f7e86edddb73ae7dafbc4598813"}
{"level":"debug","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d3c027a99c29975cb300025ae2e0980a4883f7e86edddb73ae7dafbc4598813","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d3c027a99c29975cb300025ae2e0980a4883f7e86edddb73ae7dafbc4598813"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d3c027a99c29975cb300025ae2e0980a4883f7e86edddb73ae7dafbc4598813","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d3c027a99c29975cb300025ae2e0980a4883f7e86edddb73ae7dafbc4598813","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d3c027a99c29975cb300025ae2e0980a4883f7e86edddb73ae7dafbc4598813","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d3c027a99c29975cb300025ae2e0980a4883f7e86edddb73ae7dafbc4598813","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d3c027a99c29975cb300025ae2e0980a4883f7e86edddb73ae7dafbc4598813","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d3c027a99c29975cb300025ae2e0980a4883f7e86edddb73ae7dafbc4598813"}
{"level":"debug","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d3c027a99c29975cb300025ae2e0980a4883f7e86edddb73ae7dafbc4598813","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d3c027a99c29975cb300025ae2e0980a4883f7e86edddb73ae7dafbc4598813"}
{"level":"debug","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d3c027a99c29975cb300025ae2e0980a4883f7e86edddb73ae7dafbc4598813","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d3c027a99c29975cb300025ae2e0980a4883f7e86edddb73ae7dafbc4598813"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d3c027a99c29975cb300025ae2e0980a4883f7e86edddb73ae7dafbc4598813","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d3c027a99c29975cb300025ae2e0980a4883f7e86edddb73ae7dafbc4598813","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d3c027a99c29975cb300025ae2e0980a4883f7e86edddb73ae7dafbc4598813"}
{"level":"debug","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b67bd5f6b925161e13c6b860fd4b0579572ae86bc3dc0e2358eca0467bd8c489","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b67bd5f6b925161e13c6b860fd4b0579572ae86bc3dc0e2358eca0467bd8c489","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b67bd5f6b925161e13c6b860fd4b0579572ae86bc3dc0e2358eca0467bd8c489","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b67bd5f6b925161e13c6b860fd4b0579572ae86bc3dc0e2358eca0467bd8c489","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b67bd5f6b925161e13c6b860fd4b0579572ae86bc3dc0e2358eca0467bd8c489"}
{"level":"debug","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b67bd5f6b925161e13c6b860fd4b0579572ae86bc3dc0e2358eca0467bd8c489","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b67bd5f6b925161e13c6b860fd4b0579572ae86bc3dc0e2358eca0467bd8c489"}
{"level":"debug","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b67bd5f6b925161e13c6b860fd4b0579572ae86bc3dc0e2358eca0467bd8c489","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b67bd5f6b925161e13c6b860fd4b0579572ae86bc3dc0e2358eca0467bd8c489"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b67bd5f6b925161e13c6b860fd4b0579572ae86bc3dc0e2358eca0467bd8c489","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b67bd5f6b925161e13c6b860fd4b0579572ae86bc3dc0e2358eca0467bd8c489","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b67bd5f6b925161e13c6b860fd4b0579572ae86bc3dc0e2358eca0467bd8c489","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b67bd5f6b925161e13c6b860fd4b0579572ae86bc3dc0e2358eca0467bd8c489","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b67bd5f6b925161e13c6b860fd4b0579572ae86bc3dc0e2358eca0467bd8c489","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b67bd5f6b925161e13c6b860fd4b0579572ae86bc3dc0e2358eca0467bd8c489"}
{"level":"debug","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b67bd5f6b925161e13c6b860fd4b0579572ae86bc3dc0e2358eca0467bd8c489","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b67bd5f6b925161e13c6b860fd4b0579572ae86bc3dc0e2358eca0467bd8c489"}
{"level":"debug","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b67bd5f6b925161e13c6b860fd4b0579572ae86bc3dc0e2358eca0467bd8c489","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b67bd5f6b925161e13c6b860fd4b0579572ae86bc3dc0e2358eca0467bd8c489"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b67bd5f6b925161e13c6b860fd4b0579572ae86bc3dc0e2358eca0467bd8c489","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b67bd5f6b925161e13c6b860fd4b0579572ae86bc3dc0e2358eca0467bd8c489","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b67bd5f6b925161e13c6b860fd4b0579572ae86bc3dc0e2358eca0467bd8c489","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f49af9b4433c8282e05a2e09c92c23aaaa3c0fba7c988841bd5bd9999163769","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b67bd5f6b925161e13c6b860fd4b0579572ae86bc3dc0e2358eca0467bd8c489"}
{"level":"info","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f49af9b4433c8282e05a2e09c92c23aaaa3c0fba7c988841bd5bd9999163769","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b67bd5f6b925161e13c6b860fd4b0579572ae86bc3dc0e2358eca0467bd8c489","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b67bd5f6b925161e13c6b860fd4b0579572ae86bc3dc0e2358eca0467bd8c489"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b67bd5f6b925161e13c6b860fd4b0579572ae86bc3dc0e2358eca0467bd8c489","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f49af9b4433c8282e05a2e09c92c23aaaa3c0fba7c988841bd5bd9999163769","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f49af9b4433c8282e05a2e09c92c23aaaa3c0fba7c988841bd5bd9999163769"}
{"level":"info","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f49af9b4433c8282e05a2e09c92c23aaaa3c0fba7c988841bd5bd9999163769","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b67bd5f6b925161e13c6b860fd4b0579572ae86bc3dc0e2358eca0467bd8c489","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b67bd5f6b925161e13c6b860fd4b0579572ae86bc3dc0e2358eca0467bd8c489"}
{"level":"info","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b67bd5f6b925161e13c6b860fd4b0579572ae86bc3dc0e2358eca0467bd8c489","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f49af9b4433c8282e05a2e09c92c23aaaa3c0fba7c988841bd5bd9999163769","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b67bd5f6b925161e13c6b860fd4b0579572ae86bc3dc0e2358eca0467bd8c489","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b67bd5f6b925161e13c6b860fd4b0579572ae86bc3dc0e2358eca0467bd8c489"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b67bd5f6b925161e13c6b860fd4b0579572ae86bc3dc0e2358eca0467bd8c489","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b67bd5f6b925161e13c6b860fd4b0579572ae86bc3dc0e2358eca0467bd8c489","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b67bd5f6b925161e13c6b860fd4b0579572ae86bc3dc0e2358eca0467bd8c489"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f49af9b4433c8282e05a2e09c92c23aaaa3c0fba7c988841bd5bd9999163769"}
{"level":"error","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b67bd5f6b925161e13c6b860fd4b0579572ae86bc3dc0e2358eca0467bd8c489","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b67bd5f6b925161e13c6b860fd4b0579572ae86bc3dc0e2358eca0467bd8c489\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f49af9b4433c8282e05a2e09c92c23aaaa3c0fba7c988841bd5bd9999163769","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f49af9b4433c8282e05a2e09c92c23aaaa3c0fba7c988841bd5bd9999163769"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f49af9b4433c8282e05a2e09c92c23aaaa3c0fba7c988841bd5bd9999163769","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b67bd5f6b925161e13c6b860fd4b0579572ae86bc3dc0e2358eca0467bd8c489","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b67bd5f6b925161e13c6b860fd4b0579572ae86bc3dc0e2358eca0467bd8c489"}
{"level":"info","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b67bd5f6b925161e13c6b860fd4b0579572ae86bc3dc0e2358eca0467bd8c489","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f49af9b4433c8282e05a2e09c92c23aaaa3c0fba7c988841bd5bd9999163769","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f49af9b4433c8282e05a2e09c92c23aaaa3c0fba7c988841bd5bd9999163769","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b67bd5f6b925161e13c6b860fd4b0579572ae86bc3dc0e2358eca0467bd8c489","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b67bd5f6b925161e13c6b860fd4b0579572ae86bc3dc0e2358eca0467bd8c489"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f49af9b4433c8282e05a2e09c92c23aaaa3c0fba7c988841bd5bd9999163769"}
{"level":"info","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b67bd5f6b925161e13c6b860fd4b0579572ae86bc3dc0e2358eca0467bd8c489","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f49af9b4433c8282e05a2e09c92c23aaaa3c0fba7c988841bd5bd9999163769","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f49af9b4433c8282e05a2e09c92c23aaaa3c0fba7c988841bd5bd9999163769"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b67bd5f6b925161e13c6b860fd4b0579572ae86bc3dc0e2358eca0467bd8c489"}
{"level":"info","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f49af9b4433c8282e05a2e09c92c23aaaa3c0fba7c988841bd5bd9999163769","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b67bd5f6b925161e13c6b860fd4b0579572ae86bc3dc0e2358eca0467bd8c489","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f49af9b4433c8282e05a2e09c92c23aaaa3c0fba7c988841bd5bd9999163769","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f49af9b4433c8282e05a2e09c92c23aaaa3c0fba7c988841bd5bd9999163769","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f49af9b4433c8282e05a2e09c92c23aaaa3c0fba7c988841bd5bd9999163769","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f49af9b4433c8282e05a2e09c92c23aaaa3c0fba7c988841bd5bd9999163769"}
{"level":"debug","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f49af9b4433c8282e05a2e09c92c23aaaa3c0fba7c988841bd5bd9999163769","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f49af9b4433c8282e05a2e09c92c23aaaa3c0fba7c988841bd5bd9999163769"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f49af9b4433c8282e05a2e09c92c23aaaa3c0fba7c988841bd5bd9999163769","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f49af9b4433c8282e05a2e09c92c23aaaa3c0fba7c988841bd5bd9999163769","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b67bd5f6b925161e13c6b860fd4b0579572ae86bc3dc0e2358eca0467bd8c489"}
{"level":"debug","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5561c7bea7f3444bdefb339d78d18182de40fc55c90b93722fbedaeddbe4abd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f49af9b4433c8282e05a2e09c92c23aaaa3c0fba7c988841bd5bd9999163769"}
{"level":"info","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5561c7bea7f3444bdefb339d78d18182de40fc55c90b93722fbedaeddbe4abd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5561c7bea7f3444bdefb339d78d18182de40fc55c90b93722fbedaeddbe4abd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5561c7bea7f3444bdefb339d78d18182de40fc55c90b93722fbedaeddbe4abd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5561c7bea7f3444bdefb339d78d18182de40fc55c90b93722fbedaeddbe4abd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5561c7bea7f3444bdefb339d78d18182de40fc55c90b93722fbedaeddbe4abd"}
{"level":"error","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d5561c7bea7f3444bdefb339d78d18182de40fc55c90b93722fbedaeddbe4abd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d5561c7bea7f3444bdefb339d78d18182de40fc55c90b93722fbedaeddbe4abd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5561c7bea7f3444bdefb339d78d18182de40fc55c90b93722fbedaeddbe4abd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5561c7bea7f3444bdefb339d78d18182de40fc55c90b93722fbedaeddbe4abd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5561c7bea7f3444bdefb339d78d18182de40fc55c90b93722fbedaeddbe4abd"}
{"level":"debug","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8fe4d702dbc285955087444b8efd62d502956203de006c02522b363d4ccbfe9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8fe4d702dbc285955087444b8efd62d502956203de006c02522b363d4ccbfe9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8fe4d702dbc285955087444b8efd62d502956203de006c02522b363d4ccbfe9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8fe4d702dbc285955087444b8efd62d502956203de006c02522b363d4ccbfe9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8fe4d702dbc285955087444b8efd62d502956203de006c02522b363d4ccbfe9"}
{"level":"debug","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5561c7bea7f3444bdefb339d78d18182de40fc55c90b93722fbedaeddbe4abd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5561c7bea7f3444bdefb339d78d18182de40fc55c90b93722fbedaeddbe4abd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5561c7bea7f3444bdefb339d78d18182de40fc55c90b93722fbedaeddbe4abd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8fe4d702dbc285955087444b8efd62d502956203de006c02522b363d4ccbfe9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5561c7bea7f3444bdefb339d78d18182de40fc55c90b93722fbedaeddbe4abd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8fe4d702dbc285955087444b8efd62d502956203de006c02522b363d4ccbfe9"}
{"level":"info","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5561c7bea7f3444bdefb339d78d18182de40fc55c90b93722fbedaeddbe4abd"}
{"level":"debug","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8fe4d702dbc285955087444b8efd62d502956203de006c02522b363d4ccbfe9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b8fe4d702dbc285955087444b8efd62d502956203de006c02522b363d4ccbfe9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8fe4d702dbc285955087444b8efd62d502956203de006c02522b363d4ccbfe9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8fe4d702dbc285955087444b8efd62d502956203de006c02522b363d4ccbfe9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8fe4d702dbc285955087444b8efd62d502956203de006c02522b363d4ccbfe9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f084e7aced63a64f9ce96730107f7defc798dfd183fbed7b023afb811f3f0237","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8fe4d702dbc285955087444b8efd62d502956203de006c02522b363d4ccbfe9"}
{"level":"info","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f084e7aced63a64f9ce96730107f7defc798dfd183fbed7b023afb811f3f0237","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8fe4d702dbc285955087444b8efd62d502956203de006c02522b363d4ccbfe9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b8fe4d702dbc285955087444b8efd62d502956203de006c02522b363d4ccbfe9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8fe4d702dbc285955087444b8efd62d502956203de006c02522b363d4ccbfe9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7b0738000e412607d7ea1fdb5045307f156f778a74cea60b491a0b59a799835","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f084e7aced63a64f9ce96730107f7defc798dfd183fbed7b023afb811f3f0237"}
{"level":"info","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7b0738000e412607d7ea1fdb5045307f156f778a74cea60b491a0b59a799835","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f084e7aced63a64f9ce96730107f7defc798dfd183fbed7b023afb811f3f0237","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f084e7aced63a64f9ce96730107f7defc798dfd183fbed7b023afb811f3f0237"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7b0738000e412607d7ea1fdb5045307f156f778a74cea60b491a0b59a799835"}
{"level":"info","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f084e7aced63a64f9ce96730107f7defc798dfd183fbed7b023afb811f3f0237","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8fe4d702dbc285955087444b8efd62d502956203de006c02522b363d4ccbfe9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8fe4d702dbc285955087444b8efd62d502956203de006c02522b363d4ccbfe9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7b0738000e412607d7ea1fdb5045307f156f778a74cea60b491a0b59a799835","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7b0738000e412607d7ea1fdb5045307f156f778a74cea60b491a0b59a799835"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8fe4d702dbc285955087444b8efd62d502956203de006c02522b363d4ccbfe9"}
{"level":"info","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7b0738000e412607d7ea1fdb5045307f156f778a74cea60b491a0b59a799835","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f084e7aced63a64f9ce96730107f7defc798dfd183fbed7b023afb811f3f0237","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f084e7aced63a64f9ce96730107f7defc798dfd183fbed7b023afb811f3f0237","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8fe4d702dbc285955087444b8efd62d502956203de006c02522b363d4ccbfe9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b8fe4d702dbc285955087444b8efd62d502956203de006c02522b363d4ccbfe9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f084e7aced63a64f9ce96730107f7defc798dfd183fbed7b023afb811f3f0237"}
{"level":"info","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8fe4d702dbc285955087444b8efd62d502956203de006c02522b363d4ccbfe9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7b0738000e412607d7ea1fdb5045307f156f778a74cea60b491a0b59a799835","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7b0738000e412607d7ea1fdb5045307f156f778a74cea60b491a0b59a799835","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f084e7aced63a64f9ce96730107f7defc798dfd183fbed7b023afb811f3f0237","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f084e7aced63a64f9ce96730107f7defc798dfd183fbed7b023afb811f3f0237"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7b0738000e412607d7ea1fdb5045307f156f778a74cea60b491a0b59a799835"}
{"level":"info","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f084e7aced63a64f9ce96730107f7defc798dfd183fbed7b023afb811f3f0237","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b64cba4c944bfc4d4da127d8d5949f9fc0207a7cd4574f0ab943974236bb1bd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8fe4d702dbc285955087444b8efd62d502956203de006c02522b363d4ccbfe9"}
{"level":"info","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b64cba4c944bfc4d4da127d8d5949f9fc0207a7cd4574f0ab943974236bb1bd2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8fe4d702dbc285955087444b8efd62d502956203de006c02522b363d4ccbfe9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7b0738000e412607d7ea1fdb5045307f156f778a74cea60b491a0b59a799835","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7b0738000e412607d7ea1fdb5045307f156f778a74cea60b491a0b59a799835"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7b0738000e412607d7ea1fdb5045307f156f778a74cea60b491a0b59a799835","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f084e7aced63a64f9ce96730107f7defc798dfd183fbed7b023afb811f3f0237","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b64cba4c944bfc4d4da127d8d5949f9fc0207a7cd4574f0ab943974236bb1bd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:53:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b64cba4c944bfc4d4da127d8d5949f9fc0207a7cd4574f0ab943974236bb1bd2"}
{"level":"info","ts":"2026-07-09T16:53:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b64cba4c944bfc4d4da127d8d5949f9fc0207a7cd4574f0ab943974236bb1bd2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7b0738000e412607d7ea1fdb5045307f156f778a74cea60b491a0b59a799835","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b64cba4c944bfc4d4da127d8d5949f9fc0207a7cd4574f0ab943974236bb1bd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:53:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:53:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b64cba4c944bfc4d4da127d8d5949f9fc0207a7cd4574f0ab943974236bb1bd2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b64cba4c944bfc4d4da127d8d5949f9fc0207a7cd4574f0ab943974236bb1bd2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b64cba4c944bfc4d4da127d8d5949f9fc0207a7cd4574f0ab943974236bb1bd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:53:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:53:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b64cba4c944bfc4d4da127d8d5949f9fc0207a7cd4574f0ab943974236bb1bd2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f084e7aced63a64f9ce96730107f7defc798dfd183fbed7b023afb811f3f0237"}
{"level":"error","ts":"2026-07-09T16:53:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b64cba4c944bfc4d4da127d8d5949f9fc0207a7cd4574f0ab943974236bb1bd2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b64cba4c944bfc4d4da127d8d5949f9fc0207a7cd4574f0ab943974236bb1bd2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T16:53:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b64cba4c944bfc4d4da127d8d5949f9fc0207a7cd4574f0ab943974236bb1bd2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b64cba4c944bfc4d4da127d8d5949f9fc0207a7cd4574f0ab943974236bb1bd2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:53:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7b0738000e412607d7ea1fdb5045307f156f778a74cea60b491a0b59a799835"}
{"level":"info","ts":"2026-07-09T16:53:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b64cba4c944bfc4d4da127d8d5949f9fc0207a7cd4574f0ab943974236bb1bd2"}
{"level":"info","ts":"2026-07-09T16:53:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3e9900ca657a799ef3c2ea3ac21d302e64cd690f4ebd1713012bb7051ef1f09c"}
{"level":"info","ts":"2026-07-09T16:53:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ea2e30821faab739abef5167da484593676c2e8b41b21bf476bf9f750693c663"}
{"level":"info","ts":"2026-07-09T16:53:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9b18305f1c1f225919de069d25881e9c06884b618649def1c31b58233acc24b5"}
{"level":"info","ts":"2026-07-09T16:53:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0e99e19fb7fbaab9a8c9f9a45c58f984179dbb4d9db5382a0fbf89be8a6bbf63"}
{"level":"info","ts":"2026-07-09T16:53:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c31f6ae53a21170011f62e93f647ce7c788a3cd520ed1681cf91e69753633ce1"}
{"level":"info","ts":"2026-07-09T16:53:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7a1a12c25dd0d4130453bc0edc430a35756da8a70645cafba59013d2fd216f28"}
{"level":"info","ts":"2026-07-09T16:53:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4b7eed3040cd46280b254b7f760b42b7dec7057ce5b6bbe7420483a2bd5cf9e4"}
{"level":"info","ts":"2026-07-09T16:53:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7766aca82aa2c809f46b78222d7df2cbc897976a29756932a708300e86c9cd09"}
{"level":"debug","ts":"2026-07-09T16:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d492ce5b3717fedbe5c35549e6f42275a709b7b700c970425a3cdcbb7129451b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:53:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:53:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d492ce5b3717fedbe5c35549e6f42275a709b7b700c970425a3cdcbb7129451b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d492ce5b3717fedbe5c35549e6f42275a709b7b700c970425a3cdcbb7129451b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d492ce5b3717fedbe5c35549e6f42275a709b7b700c970425a3cdcbb7129451b"}
{"level":"debug","ts":"2026-07-09T16:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d492ce5b3717fedbe5c35549e6f42275a709b7b700c970425a3cdcbb7129451b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d492ce5b3717fedbe5c35549e6f42275a709b7b700c970425a3cdcbb7129451b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d492ce5b3717fedbe5c35549e6f42275a709b7b700c970425a3cdcbb7129451b"}
{"level":"debug","ts":"2026-07-09T16:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d492ce5b3717fedbe5c35549e6f42275a709b7b700c970425a3cdcbb7129451b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:53:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:53:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d492ce5b3717fedbe5c35549e6f42275a709b7b700c970425a3cdcbb7129451b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d492ce5b3717fedbe5c35549e6f42275a709b7b700c970425a3cdcbb7129451b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d492ce5b3717fedbe5c35549e6f42275a709b7b700c970425a3cdcbb7129451b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:53:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:53:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d492ce5b3717fedbe5c35549e6f42275a709b7b700c970425a3cdcbb7129451b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d492ce5b3717fedbe5c35549e6f42275a709b7b700c970425a3cdcbb7129451b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d492ce5b3717fedbe5c35549e6f42275a709b7b700c970425a3cdcbb7129451b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d492ce5b3717fedbe5c35549e6f42275a709b7b700c970425a3cdcbb7129451b"}
{"level":"debug","ts":"2026-07-09T16:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d492ce5b3717fedbe5c35549e6f42275a709b7b700c970425a3cdcbb7129451b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d492ce5b3717fedbe5c35549e6f42275a709b7b700c970425a3cdcbb7129451b"}
{"level":"debug","ts":"2026-07-09T16:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d492ce5b3717fedbe5c35549e6f42275a709b7b700c970425a3cdcbb7129451b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:53:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:53:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d492ce5b3717fedbe5c35549e6f42275a709b7b700c970425a3cdcbb7129451b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d492ce5b3717fedbe5c35549e6f42275a709b7b700c970425a3cdcbb7129451b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d492ce5b3717fedbe5c35549e6f42275a709b7b700c970425a3cdcbb7129451b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:53:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:53:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d492ce5b3717fedbe5c35549e6f42275a709b7b700c970425a3cdcbb7129451b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d492ce5b3717fedbe5c35549e6f42275a709b7b700c970425a3cdcbb7129451b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d492ce5b3717fedbe5c35549e6f42275a709b7b700c970425a3cdcbb7129451b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d492ce5b3717fedbe5c35549e6f42275a709b7b700c970425a3cdcbb7129451b"}
{"level":"debug","ts":"2026-07-09T16:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d492ce5b3717fedbe5c35549e6f42275a709b7b700c970425a3cdcbb7129451b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d492ce5b3717fedbe5c35549e6f42275a709b7b700c970425a3cdcbb7129451b"}
{"level":"debug","ts":"2026-07-09T16:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af9862e59df7f83691675182ccce3f2823ce13063707147bf278326a86e487c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:53:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:53:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af9862e59df7f83691675182ccce3f2823ce13063707147bf278326a86e487c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d492ce5b3717fedbe5c35549e6f42275a709b7b700c970425a3cdcbb7129451b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:53:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:53:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d492ce5b3717fedbe5c35549e6f42275a709b7b700c970425a3cdcbb7129451b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af9862e59df7f83691675182ccce3f2823ce13063707147bf278326a86e487c8"}
{"level":"info","ts":"2026-07-09T16:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d492ce5b3717fedbe5c35549e6f42275a709b7b700c970425a3cdcbb7129451b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af9862e59df7f83691675182ccce3f2823ce13063707147bf278326a86e487c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:53:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:53:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af9862e59df7f83691675182ccce3f2823ce13063707147bf278326a86e487c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d492ce5b3717fedbe5c35549e6f42275a709b7b700c970425a3cdcbb7129451b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af9862e59df7f83691675182ccce3f2823ce13063707147bf278326a86e487c8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af9862e59df7f83691675182ccce3f2823ce13063707147bf278326a86e487c8"}
{"level":"debug","ts":"2026-07-09T16:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af9862e59df7f83691675182ccce3f2823ce13063707147bf278326a86e487c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:53:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:53:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af9862e59df7f83691675182ccce3f2823ce13063707147bf278326a86e487c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af9862e59df7f83691675182ccce3f2823ce13063707147bf278326a86e487c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af9862e59df7f83691675182ccce3f2823ce13063707147bf278326a86e487c8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d492ce5b3717fedbe5c35549e6f42275a709b7b700c970425a3cdcbb7129451b"}
{"level":"info","ts":"2026-07-09T16:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af9862e59df7f83691675182ccce3f2823ce13063707147bf278326a86e487c8"}
{"level":"debug","ts":"2026-07-09T16:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6295169b0a450aef2efc7b39e59cffe3a6e80f0aa7e851f89c8339a8320b77f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:53:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:53:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6295169b0a450aef2efc7b39e59cffe3a6e80f0aa7e851f89c8339a8320b77f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6295169b0a450aef2efc7b39e59cffe3a6e80f0aa7e851f89c8339a8320b77f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6295169b0a450aef2efc7b39e59cffe3a6e80f0aa7e851f89c8339a8320b77f1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6295169b0a450aef2efc7b39e59cffe3a6e80f0aa7e851f89c8339a8320b77f1"}
{"level":"debug","ts":"2026-07-09T16:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6295169b0a450aef2efc7b39e59cffe3a6e80f0aa7e851f89c8339a8320b77f1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6295169b0a450aef2efc7b39e59cffe3a6e80f0aa7e851f89c8339a8320b77f1"}
{"level":"debug","ts":"2026-07-09T16:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6295169b0a450aef2efc7b39e59cffe3a6e80f0aa7e851f89c8339a8320b77f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:53:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:53:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6295169b0a450aef2efc7b39e59cffe3a6e80f0aa7e851f89c8339a8320b77f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6295169b0a450aef2efc7b39e59cffe3a6e80f0aa7e851f89c8339a8320b77f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b198f631b7050f5e9ea144aa10b29f9e25289def4c3437487214d035713e9ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:53:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:53:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b198f631b7050f5e9ea144aa10b29f9e25289def4c3437487214d035713e9ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6295169b0a450aef2efc7b39e59cffe3a6e80f0aa7e851f89c8339a8320b77f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b198f631b7050f5e9ea144aa10b29f9e25289def4c3437487214d035713e9ef","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b198f631b7050f5e9ea144aa10b29f9e25289def4c3437487214d035713e9ef"}
{"level":"debug","ts":"2026-07-09T16:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b198f631b7050f5e9ea144aa10b29f9e25289def4c3437487214d035713e9ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:53:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:53:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b198f631b7050f5e9ea144aa10b29f9e25289def4c3437487214d035713e9ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b198f631b7050f5e9ea144aa10b29f9e25289def4c3437487214d035713e9ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b198f631b7050f5e9ea144aa10b29f9e25289def4c3437487214d035713e9ef","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:53:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6295169b0a450aef2efc7b39e59cffe3a6e80f0aa7e851f89c8339a8320b77f1"}
{"level":"info","ts":"2026-07-09T16:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b198f631b7050f5e9ea144aa10b29f9e25289def4c3437487214d035713e9ef"}
{"level":"debug","ts":"2026-07-09T16:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f9dbe87ef7b493732d94549751707a20a9c8b7f6d399cc03ca3ff4285131f3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:53:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:53:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f9dbe87ef7b493732d94549751707a20a9c8b7f6d399cc03ca3ff4285131f3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f9dbe87ef7b493732d94549751707a20a9c8b7f6d399cc03ca3ff4285131f3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f9dbe87ef7b493732d94549751707a20a9c8b7f6d399cc03ca3ff4285131f3a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f9dbe87ef7b493732d94549751707a20a9c8b7f6d399cc03ca3ff4285131f3a"}
{"level":"debug","ts":"2026-07-09T16:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f9dbe87ef7b493732d94549751707a20a9c8b7f6d399cc03ca3ff4285131f3a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f9dbe87ef7b493732d94549751707a20a9c8b7f6d399cc03ca3ff4285131f3a"}
{"level":"debug","ts":"2026-07-09T16:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f9dbe87ef7b493732d94549751707a20a9c8b7f6d399cc03ca3ff4285131f3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:53:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:53:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f9dbe87ef7b493732d94549751707a20a9c8b7f6d399cc03ca3ff4285131f3a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f9dbe87ef7b493732d94549751707a20a9c8b7f6d399cc03ca3ff4285131f3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f9dbe87ef7b493732d94549751707a20a9c8b7f6d399cc03ca3ff4285131f3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:53:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:53:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f9dbe87ef7b493732d94549751707a20a9c8b7f6d399cc03ca3ff4285131f3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7e262befa2a458a8a550274199ce6a030d2cfbdbdb9629390096bfcbfe95cb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:53:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:53:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f9dbe87ef7b493732d94549751707a20a9c8b7f6d399cc03ca3ff4285131f3a"}
{"level":"info","ts":"2026-07-09T16:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7e262befa2a458a8a550274199ce6a030d2cfbdbdb9629390096bfcbfe95cb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f9dbe87ef7b493732d94549751707a20a9c8b7f6d399cc03ca3ff4285131f3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:53:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:53:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f9dbe87ef7b493732d94549751707a20a9c8b7f6d399cc03ca3ff4285131f3a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f9dbe87ef7b493732d94549751707a20a9c8b7f6d399cc03ca3ff4285131f3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7e262befa2a458a8a550274199ce6a030d2cfbdbdb9629390096bfcbfe95cb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:53:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:53:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7e262befa2a458a8a550274199ce6a030d2cfbdbdb9629390096bfcbfe95cb1"}
{"level":"info","ts":"2026-07-09T16:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7e262befa2a458a8a550274199ce6a030d2cfbdbdb9629390096bfcbfe95cb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f9dbe87ef7b493732d94549751707a20a9c8b7f6d399cc03ca3ff4285131f3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:53:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:53:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f9dbe87ef7b493732d94549751707a20a9c8b7f6d399cc03ca3ff4285131f3a"}
{"level":"info","ts":"2026-07-09T16:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f9dbe87ef7b493732d94549751707a20a9c8b7f6d399cc03ca3ff4285131f3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7e262befa2a458a8a550274199ce6a030d2cfbdbdb9629390096bfcbfe95cb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f9dbe87ef7b493732d94549751707a20a9c8b7f6d399cc03ca3ff4285131f3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:53:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:53:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f9dbe87ef7b493732d94549751707a20a9c8b7f6d399cc03ca3ff4285131f3a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f9dbe87ef7b493732d94549751707a20a9c8b7f6d399cc03ca3ff4285131f3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f9dbe87ef7b493732d94549751707a20a9c8b7f6d399cc03ca3ff4285131f3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:53:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:53:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f9dbe87ef7b493732d94549751707a20a9c8b7f6d399cc03ca3ff4285131f3a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7e262befa2a458a8a550274199ce6a030d2cfbdbdb9629390096bfcbfe95cb1"}
{"level":"error","ts":"2026-07-09T16:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1f9dbe87ef7b493732d94549751707a20a9c8b7f6d399cc03ca3ff4285131f3a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1f9dbe87ef7b493732d94549751707a20a9c8b7f6d399cc03ca3ff4285131f3a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T16:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7e262befa2a458a8a550274199ce6a030d2cfbdbdb9629390096bfcbfe95cb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:53:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:53:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7e262befa2a458a8a550274199ce6a030d2cfbdbdb9629390096bfcbfe95cb1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7e262befa2a458a8a550274199ce6a030d2cfbdbdb9629390096bfcbfe95cb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f9dbe87ef7b493732d94549751707a20a9c8b7f6d399cc03ca3ff4285131f3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:53:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:53:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f9dbe87ef7b493732d94549751707a20a9c8b7f6d399cc03ca3ff4285131f3a"}
{"level":"info","ts":"2026-07-09T16:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f9dbe87ef7b493732d94549751707a20a9c8b7f6d399cc03ca3ff4285131f3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7e262befa2a458a8a550274199ce6a030d2cfbdbdb9629390096bfcbfe95cb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:53:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:53:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7e262befa2a458a8a550274199ce6a030d2cfbdbdb9629390096bfcbfe95cb1"}
{"level":"info","ts":"2026-07-09T16:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7e262befa2a458a8a550274199ce6a030d2cfbdbdb9629390096bfcbfe95cb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fce5e68f397ffedd5a539b62f852f9174bacc8b0693de7f6afbb61d615fdf340","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:53:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:53:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fce5e68f397ffedd5a539b62f852f9174bacc8b0693de7f6afbb61d615fdf340","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f9dbe87ef7b493732d94549751707a20a9c8b7f6d399cc03ca3ff4285131f3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:53:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:53:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f9dbe87ef7b493732d94549751707a20a9c8b7f6d399cc03ca3ff4285131f3a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fce5e68f397ffedd5a539b62f852f9174bacc8b0693de7f6afbb61d615fdf340"}
{"level":"info","ts":"2026-07-09T16:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f9dbe87ef7b493732d94549751707a20a9c8b7f6d399cc03ca3ff4285131f3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7e262befa2a458a8a550274199ce6a030d2cfbdbdb9629390096bfcbfe95cb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:53:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:53:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7e262befa2a458a8a550274199ce6a030d2cfbdbdb9629390096bfcbfe95cb1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7e262befa2a458a8a550274199ce6a030d2cfbdbdb9629390096bfcbfe95cb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fce5e68f397ffedd5a539b62f852f9174bacc8b0693de7f6afbb61d615fdf340","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:53:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:53:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fce5e68f397ffedd5a539b62f852f9174bacc8b0693de7f6afbb61d615fdf340"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f9dbe87ef7b493732d94549751707a20a9c8b7f6d399cc03ca3ff4285131f3a"}
{"level":"info","ts":"2026-07-09T16:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fce5e68f397ffedd5a539b62f852f9174bacc8b0693de7f6afbb61d615fdf340","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f9dbe87ef7b493732d94549751707a20a9c8b7f6d399cc03ca3ff4285131f3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7e262befa2a458a8a550274199ce6a030d2cfbdbdb9629390096bfcbfe95cb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:53:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:53:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7e262befa2a458a8a550274199ce6a030d2cfbdbdb9629390096bfcbfe95cb1"}
{"level":"info","ts":"2026-07-09T16:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7e262befa2a458a8a550274199ce6a030d2cfbdbdb9629390096bfcbfe95cb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fce5e68f397ffedd5a539b62f852f9174bacc8b0693de7f6afbb61d615fdf340","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:53:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:53:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fce5e68f397ffedd5a539b62f852f9174bacc8b0693de7f6afbb61d615fdf340","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7e262befa2a458a8a550274199ce6a030d2cfbdbdb9629390096bfcbfe95cb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:53:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:53:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7e262befa2a458a8a550274199ce6a030d2cfbdbdb9629390096bfcbfe95cb1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fce5e68f397ffedd5a539b62f852f9174bacc8b0693de7f6afbb61d615fdf340"}
{"level":"info","ts":"2026-07-09T16:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7e262befa2a458a8a550274199ce6a030d2cfbdbdb9629390096bfcbfe95cb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e63db8f73c95218848bd0f29610fde5905a72fb239f3e875916d57db32042928","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:53:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:53:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e63db8f73c95218848bd0f29610fde5905a72fb239f3e875916d57db32042928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fce5e68f397ffedd5a539b62f852f9174bacc8b0693de7f6afbb61d615fdf340","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:53:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:53:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fce5e68f397ffedd5a539b62f852f9174bacc8b0693de7f6afbb61d615fdf340"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f9dbe87ef7b493732d94549751707a20a9c8b7f6d399cc03ca3ff4285131f3a"}
{"level":"info","ts":"2026-07-09T16:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fce5e68f397ffedd5a539b62f852f9174bacc8b0693de7f6afbb61d615fdf340","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7e262befa2a458a8a550274199ce6a030d2cfbdbdb9629390096bfcbfe95cb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:53:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:53:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7e262befa2a458a8a550274199ce6a030d2cfbdbdb9629390096bfcbfe95cb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e63db8f73c95218848bd0f29610fde5905a72fb239f3e875916d57db32042928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fce5e68f397ffedd5a539b62f852f9174bacc8b0693de7f6afbb61d615fdf340","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7e262befa2a458a8a550274199ce6a030d2cfbdbdb9629390096bfcbfe95cb1"}
{"level":"debug","ts":"2026-07-09T16:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7e262befa2a458a8a550274199ce6a030d2cfbdbdb9629390096bfcbfe95cb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:53:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:53:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7e262befa2a458a8a550274199ce6a030d2cfbdbdb9629390096bfcbfe95cb1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7e262befa2a458a8a550274199ce6a030d2cfbdbdb9629390096bfcbfe95cb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e63db8f73c95218848bd0f29610fde5905a72fb239f3e875916d57db32042928","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:53:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:53:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e63db8f73c95218848bd0f29610fde5905a72fb239f3e875916d57db32042928"}
{"level":"info","ts":"2026-07-09T16:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e63db8f73c95218848bd0f29610fde5905a72fb239f3e875916d57db32042928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7e262befa2a458a8a550274199ce6a030d2cfbdbdb9629390096bfcbfe95cb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e63db8f73c95218848bd0f29610fde5905a72fb239f3e875916d57db32042928","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:53:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:53:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e63db8f73c95218848bd0f29610fde5905a72fb239f3e875916d57db32042928"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e63db8f73c95218848bd0f29610fde5905a72fb239f3e875916d57db32042928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e63db8f73c95218848bd0f29610fde5905a72fb239f3e875916d57db32042928","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fce5e68f397ffedd5a539b62f852f9174bacc8b0693de7f6afbb61d615fdf340"}
{"level":"debug","ts":"2026-07-09T16:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e63db8f73c95218848bd0f29610fde5905a72fb239f3e875916d57db32042928","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7e262befa2a458a8a550274199ce6a030d2cfbdbdb9629390096bfcbfe95cb1"}
{"level":"info","ts":"2026-07-09T16:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e63db8f73c95218848bd0f29610fde5905a72fb239f3e875916d57db32042928"}
{"level":"debug","ts":"2026-07-09T16:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e63db8f73c95218848bd0f29610fde5905a72fb239f3e875916d57db32042928","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:54:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:54:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e63db8f73c95218848bd0f29610fde5905a72fb239f3e875916d57db32042928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e63db8f73c95218848bd0f29610fde5905a72fb239f3e875916d57db32042928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e63db8f73c95218848bd0f29610fde5905a72fb239f3e875916d57db32042928","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e63db8f73c95218848bd0f29610fde5905a72fb239f3e875916d57db32042928"}
{"level":"debug","ts":"2026-07-09T16:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e63db8f73c95218848bd0f29610fde5905a72fb239f3e875916d57db32042928","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e63db8f73c95218848bd0f29610fde5905a72fb239f3e875916d57db32042928"}
{"level":"debug","ts":"2026-07-09T16:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e63db8f73c95218848bd0f29610fde5905a72fb239f3e875916d57db32042928","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:54:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:54:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e63db8f73c95218848bd0f29610fde5905a72fb239f3e875916d57db32042928"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e63db8f73c95218848bd0f29610fde5905a72fb239f3e875916d57db32042928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e63db8f73c95218848bd0f29610fde5905a72fb239f3e875916d57db32042928","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:54:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:54:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e63db8f73c95218848bd0f29610fde5905a72fb239f3e875916d57db32042928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e63db8f73c95218848bd0f29610fde5905a72fb239f3e875916d57db32042928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e63db8f73c95218848bd0f29610fde5905a72fb239f3e875916d57db32042928","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e63db8f73c95218848bd0f29610fde5905a72fb239f3e875916d57db32042928"}
{"level":"debug","ts":"2026-07-09T16:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e63db8f73c95218848bd0f29610fde5905a72fb239f3e875916d57db32042928","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e63db8f73c95218848bd0f29610fde5905a72fb239f3e875916d57db32042928"}
{"level":"debug","ts":"2026-07-09T16:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e63db8f73c95218848bd0f29610fde5905a72fb239f3e875916d57db32042928","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:54:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:54:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e63db8f73c95218848bd0f29610fde5905a72fb239f3e875916d57db32042928"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e63db8f73c95218848bd0f29610fde5905a72fb239f3e875916d57db32042928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e63db8f73c95218848bd0f29610fde5905a72fb239f3e875916d57db32042928","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:54:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:54:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e63db8f73c95218848bd0f29610fde5905a72fb239f3e875916d57db32042928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3942ecbd320f580709360526396dbff8a176e2a62d6c1e598d97bf7e6478feef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e63db8f73c95218848bd0f29610fde5905a72fb239f3e875916d57db32042928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e63db8f73c95218848bd0f29610fde5905a72fb239f3e875916d57db32042928","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e63db8f73c95218848bd0f29610fde5905a72fb239f3e875916d57db32042928"}
{"level":"debug","ts":"2026-07-09T16:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e63db8f73c95218848bd0f29610fde5905a72fb239f3e875916d57db32042928","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:54:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:54:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e63db8f73c95218848bd0f29610fde5905a72fb239f3e875916d57db32042928"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3942ecbd320f580709360526396dbff8a176e2a62d6c1e598d97bf7e6478feef"}
{"level":"info","ts":"2026-07-09T16:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e63db8f73c95218848bd0f29610fde5905a72fb239f3e875916d57db32042928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e63db8f73c95218848bd0f29610fde5905a72fb239f3e875916d57db32042928","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:54:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:54:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e63db8f73c95218848bd0f29610fde5905a72fb239f3e875916d57db32042928"}
{"level":"info","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e63db8f73c95218848bd0f29610fde5905a72fb239f3e875916d57db32042928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e63db8f73c95218848bd0f29610fde5905a72fb239f3e875916d57db32042928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e63db8f73c95218848bd0f29610fde5905a72fb239f3e875916d57db32042928","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e63db8f73c95218848bd0f29610fde5905a72fb239f3e875916d57db32042928"}
{"level":"debug","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e63db8f73c95218848bd0f29610fde5905a72fb239f3e875916d57db32042928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d3c027a99c29975cb300025ae2e0980a4883f7e86edddb73ae7dafbc4598813","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e63db8f73c95218848bd0f29610fde5905a72fb239f3e875916d57db32042928","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e63db8f73c95218848bd0f29610fde5905a72fb239f3e875916d57db32042928"}
{"level":"info","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d3c027a99c29975cb300025ae2e0980a4883f7e86edddb73ae7dafbc4598813"}
{"level":"debug","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"334979cfe3d72917cf050080a8372b551ace6f3d153eb80a945b1e8e57c59963","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e63db8f73c95218848bd0f29610fde5905a72fb239f3e875916d57db32042928","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:54:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:54:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e63db8f73c95218848bd0f29610fde5905a72fb239f3e875916d57db32042928"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/334979cfe3d72917cf050080a8372b551ace6f3d153eb80a945b1e8e57c59963"}
{"level":"info","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e63db8f73c95218848bd0f29610fde5905a72fb239f3e875916d57db32042928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e63db8f73c95218848bd0f29610fde5905a72fb239f3e875916d57db32042928","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:54:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:54:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e63db8f73c95218848bd0f29610fde5905a72fb239f3e875916d57db32042928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e63db8f73c95218848bd0f29610fde5905a72fb239f3e875916d57db32042928","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e63db8f73c95218848bd0f29610fde5905a72fb239f3e875916d57db32042928"}
{"level":"debug","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e63db8f73c95218848bd0f29610fde5905a72fb239f3e875916d57db32042928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e63db8f73c95218848bd0f29610fde5905a72fb239f3e875916d57db32042928","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e63db8f73c95218848bd0f29610fde5905a72fb239f3e875916d57db32042928"}
{"level":"debug","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7b0738000e412607d7ea1fdb5045307f156f778a74cea60b491a0b59a799835","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:54:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:54:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7b0738000e412607d7ea1fdb5045307f156f778a74cea60b491a0b59a799835","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7b0738000e412607d7ea1fdb5045307f156f778a74cea60b491a0b59a799835","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e63db8f73c95218848bd0f29610fde5905a72fb239f3e875916d57db32042928","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:54:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:54:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e63db8f73c95218848bd0f29610fde5905a72fb239f3e875916d57db32042928"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7b0738000e412607d7ea1fdb5045307f156f778a74cea60b491a0b59a799835"}
{"level":"info","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e63db8f73c95218848bd0f29610fde5905a72fb239f3e875916d57db32042928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7b0738000e412607d7ea1fdb5045307f156f778a74cea60b491a0b59a799835","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e63db8f73c95218848bd0f29610fde5905a72fb239f3e875916d57db32042928","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7b0738000e412607d7ea1fdb5045307f156f778a74cea60b491a0b59a799835"}
{"level":"debug","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7b0738000e412607d7ea1fdb5045307f156f778a74cea60b491a0b59a799835","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:54:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:54:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7b0738000e412607d7ea1fdb5045307f156f778a74cea60b491a0b59a799835"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7b0738000e412607d7ea1fdb5045307f156f778a74cea60b491a0b59a799835","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7b0738000e412607d7ea1fdb5045307f156f778a74cea60b491a0b59a799835","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e63db8f73c95218848bd0f29610fde5905a72fb239f3e875916d57db32042928"}
{"level":"info","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7b0738000e412607d7ea1fdb5045307f156f778a74cea60b491a0b59a799835"}
{"level":"debug","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1c5b936252b577f498c93fac77f8fd8e13cd9b1b72e8e28f529af065382b8f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:54:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:54:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1c5b936252b577f498c93fac77f8fd8e13cd9b1b72e8e28f529af065382b8f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1c5b936252b577f498c93fac77f8fd8e13cd9b1b72e8e28f529af065382b8f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1c5b936252b577f498c93fac77f8fd8e13cd9b1b72e8e28f529af065382b8f1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1c5b936252b577f498c93fac77f8fd8e13cd9b1b72e8e28f529af065382b8f1"}
{"level":"debug","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1c5b936252b577f498c93fac77f8fd8e13cd9b1b72e8e28f529af065382b8f1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1c5b936252b577f498c93fac77f8fd8e13cd9b1b72e8e28f529af065382b8f1"}
{"level":"debug","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1c5b936252b577f498c93fac77f8fd8e13cd9b1b72e8e28f529af065382b8f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:54:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:54:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1c5b936252b577f498c93fac77f8fd8e13cd9b1b72e8e28f529af065382b8f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1c5b936252b577f498c93fac77f8fd8e13cd9b1b72e8e28f529af065382b8f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1c5b936252b577f498c93fac77f8fd8e13cd9b1b72e8e28f529af065382b8f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:54:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:54:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1c5b936252b577f498c93fac77f8fd8e13cd9b1b72e8e28f529af065382b8f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fce5e68f397ffedd5a539b62f852f9174bacc8b0693de7f6afbb61d615fdf340","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1c5b936252b577f498c93fac77f8fd8e13cd9b1b72e8e28f529af065382b8f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1c5b936252b577f498c93fac77f8fd8e13cd9b1b72e8e28f529af065382b8f1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1c5b936252b577f498c93fac77f8fd8e13cd9b1b72e8e28f529af065382b8f1"}
{"level":"debug","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1c5b936252b577f498c93fac77f8fd8e13cd9b1b72e8e28f529af065382b8f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:54:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:54:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1c5b936252b577f498c93fac77f8fd8e13cd9b1b72e8e28f529af065382b8f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fce5e68f397ffedd5a539b62f852f9174bacc8b0693de7f6afbb61d615fdf340"}
{"level":"info","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1c5b936252b577f498c93fac77f8fd8e13cd9b1b72e8e28f529af065382b8f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1c5b936252b577f498c93fac77f8fd8e13cd9b1b72e8e28f529af065382b8f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:54:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:54:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1c5b936252b577f498c93fac77f8fd8e13cd9b1b72e8e28f529af065382b8f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1c5b936252b577f498c93fac77f8fd8e13cd9b1b72e8e28f529af065382b8f1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1c5b936252b577f498c93fac77f8fd8e13cd9b1b72e8e28f529af065382b8f1"}
{"level":"debug","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1c5b936252b577f498c93fac77f8fd8e13cd9b1b72e8e28f529af065382b8f1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1c5b936252b577f498c93fac77f8fd8e13cd9b1b72e8e28f529af065382b8f1"}
{"level":"debug","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1c5b936252b577f498c93fac77f8fd8e13cd9b1b72e8e28f529af065382b8f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:54:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:54:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1c5b936252b577f498c93fac77f8fd8e13cd9b1b72e8e28f529af065382b8f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1c5b936252b577f498c93fac77f8fd8e13cd9b1b72e8e28f529af065382b8f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1c5b936252b577f498c93fac77f8fd8e13cd9b1b72e8e28f529af065382b8f1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1c5b936252b577f498c93fac77f8fd8e13cd9b1b72e8e28f529af065382b8f1"}
{"level":"debug","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71388d8adfefe7c1103db4d6aa7b37eac01057f9b68d00215057073493832e8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:54:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:54:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71388d8adfefe7c1103db4d6aa7b37eac01057f9b68d00215057073493832e8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71388d8adfefe7c1103db4d6aa7b37eac01057f9b68d00215057073493832e8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71388d8adfefe7c1103db4d6aa7b37eac01057f9b68d00215057073493832e8e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71388d8adfefe7c1103db4d6aa7b37eac01057f9b68d00215057073493832e8e"}
{"level":"debug","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71388d8adfefe7c1103db4d6aa7b37eac01057f9b68d00215057073493832e8e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71388d8adfefe7c1103db4d6aa7b37eac01057f9b68d00215057073493832e8e"}
{"level":"debug","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71388d8adfefe7c1103db4d6aa7b37eac01057f9b68d00215057073493832e8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:54:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:54:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71388d8adfefe7c1103db4d6aa7b37eac01057f9b68d00215057073493832e8e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71388d8adfefe7c1103db4d6aa7b37eac01057f9b68d00215057073493832e8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71388d8adfefe7c1103db4d6aa7b37eac01057f9b68d00215057073493832e8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:54:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:54:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71388d8adfefe7c1103db4d6aa7b37eac01057f9b68d00215057073493832e8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af9862e59df7f83691675182ccce3f2823ce13063707147bf278326a86e487c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71388d8adfefe7c1103db4d6aa7b37eac01057f9b68d00215057073493832e8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71388d8adfefe7c1103db4d6aa7b37eac01057f9b68d00215057073493832e8e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71388d8adfefe7c1103db4d6aa7b37eac01057f9b68d00215057073493832e8e"}
{"level":"debug","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71388d8adfefe7c1103db4d6aa7b37eac01057f9b68d00215057073493832e8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:54:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:54:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71388d8adfefe7c1103db4d6aa7b37eac01057f9b68d00215057073493832e8e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af9862e59df7f83691675182ccce3f2823ce13063707147bf278326a86e487c8"}
{"level":"info","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71388d8adfefe7c1103db4d6aa7b37eac01057f9b68d00215057073493832e8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71388d8adfefe7c1103db4d6aa7b37eac01057f9b68d00215057073493832e8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:54:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:54:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71388d8adfefe7c1103db4d6aa7b37eac01057f9b68d00215057073493832e8e"}
{"level":"info","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71388d8adfefe7c1103db4d6aa7b37eac01057f9b68d00215057073493832e8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71388d8adfefe7c1103db4d6aa7b37eac01057f9b68d00215057073493832e8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71388d8adfefe7c1103db4d6aa7b37eac01057f9b68d00215057073493832e8e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71388d8adfefe7c1103db4d6aa7b37eac01057f9b68d00215057073493832e8e"}
{"level":"debug","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71388d8adfefe7c1103db4d6aa7b37eac01057f9b68d00215057073493832e8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28be827e9e465483c1a86ba02840129ea887a29aa8440b8406050c6a04e723a5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71388d8adfefe7c1103db4d6aa7b37eac01057f9b68d00215057073493832e8e"}
{"level":"info","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28be827e9e465483c1a86ba02840129ea887a29aa8440b8406050c6a04e723a5"}
{"level":"debug","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71388d8adfefe7c1103db4d6aa7b37eac01057f9b68d00215057073493832e8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:54:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:54:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71388d8adfefe7c1103db4d6aa7b37eac01057f9b68d00215057073493832e8e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71388d8adfefe7c1103db4d6aa7b37eac01057f9b68d00215057073493832e8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71388d8adfefe7c1103db4d6aa7b37eac01057f9b68d00215057073493832e8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:54:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:54:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71388d8adfefe7c1103db4d6aa7b37eac01057f9b68d00215057073493832e8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71388d8adfefe7c1103db4d6aa7b37eac01057f9b68d00215057073493832e8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71388d8adfefe7c1103db4d6aa7b37eac01057f9b68d00215057073493832e8e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71388d8adfefe7c1103db4d6aa7b37eac01057f9b68d00215057073493832e8e"}
{"level":"debug","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71388d8adfefe7c1103db4d6aa7b37eac01057f9b68d00215057073493832e8e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71388d8adfefe7c1103db4d6aa7b37eac01057f9b68d00215057073493832e8e"}
{"level":"debug","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ddd7728a30af0ce5c1ed50f9cbdd8b44aeacdd369ed5215481967d231ee4dd6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:54:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:54:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ddd7728a30af0ce5c1ed50f9cbdd8b44aeacdd369ed5215481967d231ee4dd6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b198f631b7050f5e9ea144aa10b29f9e25289def4c3437487214d035713e9ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ddd7728a30af0ce5c1ed50f9cbdd8b44aeacdd369ed5215481967d231ee4dd6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ddd7728a30af0ce5c1ed50f9cbdd8b44aeacdd369ed5215481967d231ee4dd6"}
{"level":"debug","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ddd7728a30af0ce5c1ed50f9cbdd8b44aeacdd369ed5215481967d231ee4dd6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:54:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:54:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ddd7728a30af0ce5c1ed50f9cbdd8b44aeacdd369ed5215481967d231ee4dd6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ddd7728a30af0ce5c1ed50f9cbdd8b44aeacdd369ed5215481967d231ee4dd6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71388d8adfefe7c1103db4d6aa7b37eac01057f9b68d00215057073493832e8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:54:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:54:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71388d8adfefe7c1103db4d6aa7b37eac01057f9b68d00215057073493832e8e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b198f631b7050f5e9ea144aa10b29f9e25289def4c3437487214d035713e9ef"}
{"level":"info","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71388d8adfefe7c1103db4d6aa7b37eac01057f9b68d00215057073493832e8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ddd7728a30af0ce5c1ed50f9cbdd8b44aeacdd369ed5215481967d231ee4dd6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:54:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:54:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ddd7728a30af0ce5c1ed50f9cbdd8b44aeacdd369ed5215481967d231ee4dd6"}
{"level":"info","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ddd7728a30af0ce5c1ed50f9cbdd8b44aeacdd369ed5215481967d231ee4dd6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71388d8adfefe7c1103db4d6aa7b37eac01057f9b68d00215057073493832e8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:54:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:54:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71388d8adfefe7c1103db4d6aa7b37eac01057f9b68d00215057073493832e8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ddd7728a30af0ce5c1ed50f9cbdd8b44aeacdd369ed5215481967d231ee4dd6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:54:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:54:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ddd7728a30af0ce5c1ed50f9cbdd8b44aeacdd369ed5215481967d231ee4dd6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71388d8adfefe7c1103db4d6aa7b37eac01057f9b68d00215057073493832e8e"}
{"level":"info","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ddd7728a30af0ce5c1ed50f9cbdd8b44aeacdd369ed5215481967d231ee4dd6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71388d8adfefe7c1103db4d6aa7b37eac01057f9b68d00215057073493832e8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:54:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:54:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71388d8adfefe7c1103db4d6aa7b37eac01057f9b68d00215057073493832e8e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ddd7728a30af0ce5c1ed50f9cbdd8b44aeacdd369ed5215481967d231ee4dd6"}
{"level":"info","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71388d8adfefe7c1103db4d6aa7b37eac01057f9b68d00215057073493832e8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ddd7728a30af0ce5c1ed50f9cbdd8b44aeacdd369ed5215481967d231ee4dd6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71388d8adfefe7c1103db4d6aa7b37eac01057f9b68d00215057073493832e8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:54:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:54:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71388d8adfefe7c1103db4d6aa7b37eac01057f9b68d00215057073493832e8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71388d8adfefe7c1103db4d6aa7b37eac01057f9b68d00215057073493832e8e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71388d8adfefe7c1103db4d6aa7b37eac01057f9b68d00215057073493832e8e"}
{"level":"debug","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71388d8adfefe7c1103db4d6aa7b37eac01057f9b68d00215057073493832e8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:54:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:54:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71388d8adfefe7c1103db4d6aa7b37eac01057f9b68d00215057073493832e8e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71388d8adfefe7c1103db4d6aa7b37eac01057f9b68d00215057073493832e8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71388d8adfefe7c1103db4d6aa7b37eac01057f9b68d00215057073493832e8e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ddd7728a30af0ce5c1ed50f9cbdd8b44aeacdd369ed5215481967d231ee4dd6"}
{"level":"info","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71388d8adfefe7c1103db4d6aa7b37eac01057f9b68d00215057073493832e8e"}
{"level":"debug","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f084e7aced63a64f9ce96730107f7defc798dfd183fbed7b023afb811f3f0237","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:54:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:54:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f084e7aced63a64f9ce96730107f7defc798dfd183fbed7b023afb811f3f0237","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f084e7aced63a64f9ce96730107f7defc798dfd183fbed7b023afb811f3f0237","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f084e7aced63a64f9ce96730107f7defc798dfd183fbed7b023afb811f3f0237","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f084e7aced63a64f9ce96730107f7defc798dfd183fbed7b023afb811f3f0237"}
{"level":"debug","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f084e7aced63a64f9ce96730107f7defc798dfd183fbed7b023afb811f3f0237","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f084e7aced63a64f9ce96730107f7defc798dfd183fbed7b023afb811f3f0237"}
{"level":"debug","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f084e7aced63a64f9ce96730107f7defc798dfd183fbed7b023afb811f3f0237","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:54:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:54:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f084e7aced63a64f9ce96730107f7defc798dfd183fbed7b023afb811f3f0237"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f084e7aced63a64f9ce96730107f7defc798dfd183fbed7b023afb811f3f0237","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f084e7aced63a64f9ce96730107f7defc798dfd183fbed7b023afb811f3f0237","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:54:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:54:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f084e7aced63a64f9ce96730107f7defc798dfd183fbed7b023afb811f3f0237","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b64cba4c944bfc4d4da127d8d5949f9fc0207a7cd4574f0ab943974236bb1bd2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f084e7aced63a64f9ce96730107f7defc798dfd183fbed7b023afb811f3f0237","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f084e7aced63a64f9ce96730107f7defc798dfd183fbed7b023afb811f3f0237","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f084e7aced63a64f9ce96730107f7defc798dfd183fbed7b023afb811f3f0237"}
{"level":"debug","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f084e7aced63a64f9ce96730107f7defc798dfd183fbed7b023afb811f3f0237","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:54:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:54:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f084e7aced63a64f9ce96730107f7defc798dfd183fbed7b023afb811f3f0237"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b64cba4c944bfc4d4da127d8d5949f9fc0207a7cd4574f0ab943974236bb1bd2"}
{"level":"info","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f084e7aced63a64f9ce96730107f7defc798dfd183fbed7b023afb811f3f0237","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f084e7aced63a64f9ce96730107f7defc798dfd183fbed7b023afb811f3f0237","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:54:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:54:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f084e7aced63a64f9ce96730107f7defc798dfd183fbed7b023afb811f3f0237"}
{"level":"info","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f084e7aced63a64f9ce96730107f7defc798dfd183fbed7b023afb811f3f0237","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f084e7aced63a64f9ce96730107f7defc798dfd183fbed7b023afb811f3f0237","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f084e7aced63a64f9ce96730107f7defc798dfd183fbed7b023afb811f3f0237","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f084e7aced63a64f9ce96730107f7defc798dfd183fbed7b023afb811f3f0237"}
{"level":"debug","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f084e7aced63a64f9ce96730107f7defc798dfd183fbed7b023afb811f3f0237","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d492ce5b3717fedbe5c35549e6f42275a709b7b700c970425a3cdcbb7129451b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f084e7aced63a64f9ce96730107f7defc798dfd183fbed7b023afb811f3f0237"}
{"level":"debug","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7e262befa2a458a8a550274199ce6a030d2cfbdbdb9629390096bfcbfe95cb1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d492ce5b3717fedbe5c35549e6f42275a709b7b700c970425a3cdcbb7129451b"}
{"level":"debug","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5561c7bea7f3444bdefb339d78d18182de40fc55c90b93722fbedaeddbe4abd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f084e7aced63a64f9ce96730107f7defc798dfd183fbed7b023afb811f3f0237","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:54:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:54:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f084e7aced63a64f9ce96730107f7defc798dfd183fbed7b023afb811f3f0237"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f084e7aced63a64f9ce96730107f7defc798dfd183fbed7b023afb811f3f0237","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f084e7aced63a64f9ce96730107f7defc798dfd183fbed7b023afb811f3f0237","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7e262befa2a458a8a550274199ce6a030d2cfbdbdb9629390096bfcbfe95cb1"}
{"level":"info","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5561c7bea7f3444bdefb339d78d18182de40fc55c90b93722fbedaeddbe4abd"}
{"level":"debug","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f49af9b4433c8282e05a2e09c92c23aaaa3c0fba7c988841bd5bd9999163769","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"10b7ae3c3d47247c959ee62d1b6f9aa0f841e0165d2f918227b4327ec5b1a3d6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f084e7aced63a64f9ce96730107f7defc798dfd183fbed7b023afb811f3f0237"}
{"level":"debug","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"043e9366356ee2d3bfa31befc24aaace076873feb55824d159f960993e657d29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b67bd5f6b925161e13c6b860fd4b0579572ae86bc3dc0e2358eca0467bd8c489","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f9dbe87ef7b493732d94549751707a20a9c8b7f6d399cc03ca3ff4285131f3a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f49af9b4433c8282e05a2e09c92c23aaaa3c0fba7c988841bd5bd9999163769"}
{"level":"debug","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6295169b0a450aef2efc7b39e59cffe3a6e80f0aa7e851f89c8339a8320b77f1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10b7ae3c3d47247c959ee62d1b6f9aa0f841e0165d2f918227b4327ec5b1a3d6"}
{"level":"debug","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8fe4d702dbc285955087444b8efd62d502956203de006c02522b363d4ccbfe9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/043e9366356ee2d3bfa31befc24aaace076873feb55824d159f960993e657d29"}
{"level":"info","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b67bd5f6b925161e13c6b860fd4b0579572ae86bc3dc0e2358eca0467bd8c489"}
{"level":"info","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f9dbe87ef7b493732d94549751707a20a9c8b7f6d399cc03ca3ff4285131f3a"}
{"level":"info","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6295169b0a450aef2efc7b39e59cffe3a6e80f0aa7e851f89c8339a8320b77f1"}
{"level":"info","ts":"2026-07-09T16:54:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8fe4d702dbc285955087444b8efd62d502956203de006c02522b363d4ccbfe9"}
{"level":"info","ts":"2026-07-09T16:54:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c67a9254-4bbc-4872-bc7e-cf48799518f4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:39060","PortSpecifier":{"PortValue":39060}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c67a9254-4bbc-4872-bc7e-cf48799518f4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-bef56b.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T16:54:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c67a9254-4bbc-4872-bc7e-cf48799518f4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:39060","PortSpecifier":{"PortValue":39060}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783616048,"nanos":790479398},"http":{"id":"c67a9254-4bbc-4872-bc7e-cf48799518f4","method":"POST","headers":{":authority":"e2e-shared-a-bef56b.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T16:54:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c67a9254-4bbc-4872-bc7e-cf48799518f4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T16:54:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c67a9254-4bbc-4872-bc7e-cf48799518f4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"045eab5d-f4e5-44ab-afa6-3765d3a1e600","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fbe0c265-c7ed-4a1c-9972-77fe8f7b4ecb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8c696e1ec923"]}}
{"level":"debug","ts":"2026-07-09T16:54:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c67a9254-4bbc-4872-bc7e-cf48799518f4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8c696e1ec923"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fbe0c265-c7ed-4a1c-9972-77fe8f7b4ecb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"045eab5d-f4e5-44ab-afa6-3765d3a1e600","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"043e9366356ee2d3bfa31befc24aaace076873feb55824d159f960993e657d29"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bef56b.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T16:54:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c67a9254-4bbc-4872-bc7e-cf48799518f4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:54:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c67a9254-4bbc-4872-bc7e-cf48799518f4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:54:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c67a9254-4bbc-4872-bc7e-cf48799518f4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bef56b/sub-test-model-bef56b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:54:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c67a9254-4bbc-4872-bc7e-cf48799518f4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T16:54:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c67a9254-4bbc-4872-bc7e-cf48799518f4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T16:54:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c67a9254-4bbc-4872-bc7e-cf48799518f4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-09T16:54:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c67a9254-4bbc-4872-bc7e-cf48799518f4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T16:54:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c67a9254-4bbc-4872-bc7e-cf48799518f4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T16:54:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dab60c72-7ee7-4987-9113-54049c1f6a60","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:59656","PortSpecifier":{"PortValue":59656}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dab60c72-7ee7-4987-9113-54049c1f6a60","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-6bf011.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T16:54:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dab60c72-7ee7-4987-9113-54049c1f6a60","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:59656","PortSpecifier":{"PortValue":59656}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783616048,"nanos":835392156},"http":{"id":"dab60c72-7ee7-4987-9113-54049c1f6a60","method":"POST","headers":{":authority":"e2e-shared-b-6bf011.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T16:54:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"dab60c72-7ee7-4987-9113-54049c1f6a60","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T16:54:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dab60c72-7ee7-4987-9113-54049c1f6a60","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"045eab5d-f4e5-44ab-afa6-3765d3a1e600","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fbe0c265-c7ed-4a1c-9972-77fe8f7b4ecb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8c696e1ec923"]}}
{"level":"debug","ts":"2026-07-09T16:54:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dab60c72-7ee7-4987-9113-54049c1f6a60","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8c696e1ec923"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fbe0c265-c7ed-4a1c-9972-77fe8f7b4ecb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"045eab5d-f4e5-44ab-afa6-3765d3a1e600","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"28be827e9e465483c1a86ba02840129ea887a29aa8440b8406050c6a04e723a5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6bf011.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T16:54:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dab60c72-7ee7-4987-9113-54049c1f6a60","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:54:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dab60c72-7ee7-4987-9113-54049c1f6a60","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:54:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dab60c72-7ee7-4987-9113-54049c1f6a60","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6bf011/sub-test-model-6bf011\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:54:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dab60c72-7ee7-4987-9113-54049c1f6a60","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T16:54:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dab60c72-7ee7-4987-9113-54049c1f6a60","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T16:54:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dab60c72-7ee7-4987-9113-54049c1f6a60","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T16:54:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dab60c72-7ee7-4987-9113-54049c1f6a60","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T16:54:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dab60c72-7ee7-4987-9113-54049c1f6a60","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T16:54:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"529e16cb-3eb6-4f2d-b8f0-165e13c01bd4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:39068","PortSpecifier":{"PortValue":39068}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"529e16cb-3eb6-4f2d-b8f0-165e13c01bd4","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-bef56b.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T16:54:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"529e16cb-3eb6-4f2d-b8f0-165e13c01bd4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:39068","PortSpecifier":{"PortValue":39068}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783616048,"nanos":874663634},"http":{"id":"529e16cb-3eb6-4f2d-b8f0-165e13c01bd4","method":"GET","headers":{":authority":"e2e-shared-a-bef56b.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T16:54:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"529e16cb-3eb6-4f2d-b8f0-165e13c01bd4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1B92c25mmxmIbSHsB_4PI7Ajht3dFrAiozPRwyFNT50ONwiHHCGTuvq7IS4fG"}
{"level":"debug","ts":"2026-07-09T16:54:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"529e16cb-3eb6-4f2d-b8f0-165e13c01bd4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bef56b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1B92c25mmxmIbSHsB_4PI7Ajht3dFrAiozPRwyFNT50ONwiHHCGTuvq7IS4fG\"}"}
{"level":"debug","ts":"2026-07-09T16:54:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"529e16cb-3eb6-4f2d-b8f0-165e13c01bd4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bef56b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"651fb8d6-232d-47ad-ae95-706328a7c62a","keyName":"e2e-sub-iso-c913ef","subscription":"e2e-a-only-d048d5","tenant":"e2e-shared-a-bef56b","userId":"651fb8d6-232d-47ad-ae95-706328a7c62a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T16:54:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"529e16cb-3eb6-4f2d-b8f0-165e13c01bd4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T16:54:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"529e16cb-3eb6-4f2d-b8f0-165e13c01bd4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:54:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"529e16cb-3eb6-4f2d-b8f0-165e13c01bd4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:54:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"529e16cb-3eb6-4f2d-b8f0-165e13c01bd4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bef56b/sub-test-model-bef56b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:54:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"529e16cb-3eb6-4f2d-b8f0-165e13c01bd4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-09T16:54:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"529e16cb-3eb6-4f2d-b8f0-165e13c01bd4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T16:54:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"529e16cb-3eb6-4f2d-b8f0-165e13c01bd4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T16:54:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"529e16cb-3eb6-4f2d-b8f0-165e13c01bd4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-d048d5"}
{"level":"info","ts":"2026-07-09T16:54:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"529e16cb-3eb6-4f2d-b8f0-165e13c01bd4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T16:54:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"529e16cb-3eb6-4f2d-b8f0-165e13c01bd4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T16:54:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6abb88ae-b665-4b93-a3dc-27987398f963","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:59670","PortSpecifier":{"PortValue":59670}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6abb88ae-b665-4b93-a3dc-27987398f963","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-6bf011.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T16:54:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6abb88ae-b665-4b93-a3dc-27987398f963","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:59670","PortSpecifier":{"PortValue":59670}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783616048,"nanos":919368740},"http":{"id":"6abb88ae-b665-4b93-a3dc-27987398f963","method":"GET","headers":{":authority":"e2e-shared-b-6bf011.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T16:54:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6abb88ae-b665-4b93-a3dc-27987398f963","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-11wDX3pT5QXRm96op_TdcD7DMFlPOcWZIbmEVYbH8dgxdzNmuNXAqkRrb7aC4"}
{"level":"debug","ts":"2026-07-09T16:54:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6abb88ae-b665-4b93-a3dc-27987398f963","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-6bf011.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-11wDX3pT5QXRm96op_TdcD7DMFlPOcWZIbmEVYbH8dgxdzNmuNXAqkRrb7aC4\"}"}
{"level":"debug","ts":"2026-07-09T16:54:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6abb88ae-b665-4b93-a3dc-27987398f963","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-6bf011.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f8a84ac6-3595-4b7a-a1f2-500b9c50f246","keyName":"e2e-sub-iso-e3c1dc","subscription":"e2e-b-only-d048d5","tenant":"e2e-shared-b-6bf011","userId":"f8a84ac6-3595-4b7a-a1f2-500b9c50f246","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T16:54:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6abb88ae-b665-4b93-a3dc-27987398f963","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T16:54:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6abb88ae-b665-4b93-a3dc-27987398f963","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:54:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6abb88ae-b665-4b93-a3dc-27987398f963","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:54:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6abb88ae-b665-4b93-a3dc-27987398f963","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6bf011/sub-test-model-6bf011\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:54:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6abb88ae-b665-4b93-a3dc-27987398f963","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T16:54:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6abb88ae-b665-4b93-a3dc-27987398f963","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-09T16:54:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6abb88ae-b665-4b93-a3dc-27987398f963","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-d048d5"}
{"level":"debug","ts":"2026-07-09T16:54:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6abb88ae-b665-4b93-a3dc-27987398f963","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T16:54:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6abb88ae-b665-4b93-a3dc-27987398f963","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T16:54:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6abb88ae-b665-4b93-a3dc-27987398f963","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T16:54:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1f0fde8-c737-4948-afb0-90eb4af5f59d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:60672","PortSpecifier":{"PortValue":60672}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c1f0fde8-c737-4948-afb0-90eb4af5f59d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-bef56b.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T16:54:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1f0fde8-c737-4948-afb0-90eb4af5f59d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:60672","PortSpecifier":{"PortValue":60672}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783616069,"nanos":540472759},"http":{"id":"c1f0fde8-c737-4948-afb0-90eb4af5f59d","method":"POST","headers":{":authority":"e2e-shared-a-bef56b.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T16:54:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c1f0fde8-c737-4948-afb0-90eb4af5f59d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T16:54:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c1f0fde8-c737-4948-afb0-90eb4af5f59d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"045eab5d-f4e5-44ab-afa6-3765d3a1e600","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fbe0c265-c7ed-4a1c-9972-77fe8f7b4ecb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8c696e1ec923"]}}
{"level":"debug","ts":"2026-07-09T16:54:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c1f0fde8-c737-4948-afb0-90eb4af5f59d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8c696e1ec923"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fbe0c265-c7ed-4a1c-9972-77fe8f7b4ecb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"045eab5d-f4e5-44ab-afa6-3765d3a1e600","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"043e9366356ee2d3bfa31befc24aaace076873feb55824d159f960993e657d29"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bef56b.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T16:54:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1f0fde8-c737-4948-afb0-90eb4af5f59d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:54:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1f0fde8-c737-4948-afb0-90eb4af5f59d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:54:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1f0fde8-c737-4948-afb0-90eb4af5f59d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bef56b/sub-test-model-bef56b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:54:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c1f0fde8-c737-4948-afb0-90eb4af5f59d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T16:54:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1f0fde8-c737-4948-afb0-90eb4af5f59d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T16:54:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1f0fde8-c737-4948-afb0-90eb4af5f59d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T16:54:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1f0fde8-c737-4948-afb0-90eb4af5f59d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T16:54:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1f0fde8-c737-4948-afb0-90eb4af5f59d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T16:54:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"22e0dfb9-97d1-47ab-9ab3-d0d2d069cc1a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:49012","PortSpecifier":{"PortValue":49012}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"22e0dfb9-97d1-47ab-9ab3-d0d2d069cc1a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-6bf011.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T16:54:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"22e0dfb9-97d1-47ab-9ab3-d0d2d069cc1a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:49012","PortSpecifier":{"PortValue":49012}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783616069,"nanos":586564252},"http":{"id":"22e0dfb9-97d1-47ab-9ab3-d0d2d069cc1a","method":"POST","headers":{":authority":"e2e-shared-b-6bf011.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T16:54:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"22e0dfb9-97d1-47ab-9ab3-d0d2d069cc1a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T16:54:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"22e0dfb9-97d1-47ab-9ab3-d0d2d069cc1a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"045eab5d-f4e5-44ab-afa6-3765d3a1e600","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fbe0c265-c7ed-4a1c-9972-77fe8f7b4ecb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8c696e1ec923"]}}
{"level":"debug","ts":"2026-07-09T16:54:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"22e0dfb9-97d1-47ab-9ab3-d0d2d069cc1a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8c696e1ec923"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fbe0c265-c7ed-4a1c-9972-77fe8f7b4ecb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"045eab5d-f4e5-44ab-afa6-3765d3a1e600","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"28be827e9e465483c1a86ba02840129ea887a29aa8440b8406050c6a04e723a5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6bf011.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T16:54:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"22e0dfb9-97d1-47ab-9ab3-d0d2d069cc1a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:54:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"22e0dfb9-97d1-47ab-9ab3-d0d2d069cc1a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:54:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"22e0dfb9-97d1-47ab-9ab3-d0d2d069cc1a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6bf011/sub-test-model-6bf011\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:54:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"22e0dfb9-97d1-47ab-9ab3-d0d2d069cc1a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T16:54:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"22e0dfb9-97d1-47ab-9ab3-d0d2d069cc1a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T16:54:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"22e0dfb9-97d1-47ab-9ab3-d0d2d069cc1a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T16:54:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"22e0dfb9-97d1-47ab-9ab3-d0d2d069cc1a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T16:54:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"22e0dfb9-97d1-47ab-9ab3-d0d2d069cc1a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T16:54:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fa0d4e8d-d442-43a2-ab9f-eab527fa151a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:60684","PortSpecifier":{"PortValue":60684}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fa0d4e8d-d442-43a2-ab9f-eab527fa151a","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-bef56b.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T16:54:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fa0d4e8d-d442-43a2-ab9f-eab527fa151a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:60684","PortSpecifier":{"PortValue":60684}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783616069,"nanos":620551971},"http":{"id":"fa0d4e8d-d442-43a2-ab9f-eab527fa151a","method":"POST","headers":{":authority":"e2e-shared-a-bef56b.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T16:54:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fa0d4e8d-d442-43a2-ab9f-eab527fa151a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-qJwQ0QdCcRazz6UY_tfD8LH2DHlC6FiL1zcpLn7ef6SN7dj6LXL9neEYC5VZ"}
{"level":"debug","ts":"2026-07-09T16:54:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fa0d4e8d-d442-43a2-ab9f-eab527fa151a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bef56b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-qJwQ0QdCcRazz6UY_tfD8LH2DHlC6FiL1zcpLn7ef6SN7dj6LXL9neEYC5VZ\"}"}
{"level":"debug","ts":"2026-07-09T16:54:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fa0d4e8d-d442-43a2-ab9f-eab527fa151a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bef56b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5f047944-a10a-4563-a41b-99187dfc4c2e","keyName":"e2e-sub-iso-9e2b0a","subscription":"e2e-shared-sub-fe8f29","tenant":"e2e-shared-a-bef56b","userId":"5f047944-a10a-4563-a41b-99187dfc4c2e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T16:54:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fa0d4e8d-d442-43a2-ab9f-eab527fa151a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T16:54:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa0d4e8d-d442-43a2-ab9f-eab527fa151a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:54:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa0d4e8d-d442-43a2-ab9f-eab527fa151a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:54:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa0d4e8d-d442-43a2-ab9f-eab527fa151a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bef56b/sub-test-model-bef56b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:54:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fa0d4e8d-d442-43a2-ab9f-eab527fa151a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-09T16:54:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa0d4e8d-d442-43a2-ab9f-eab527fa151a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T16:54:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa0d4e8d-d442-43a2-ab9f-eab527fa151a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-fe8f29"}
{"level":"debug","ts":"2026-07-09T16:54:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa0d4e8d-d442-43a2-ab9f-eab527fa151a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T16:54:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fa0d4e8d-d442-43a2-ab9f-eab527fa151a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T16:54:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fa0d4e8d-d442-43a2-ab9f-eab527fa151a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T16:54:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"091b10a5-c922-4cec-99c4-0421452026b2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:49018","PortSpecifier":{"PortValue":49018}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"091b10a5-c922-4cec-99c4-0421452026b2","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-6bf011.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T16:54:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"091b10a5-c922-4cec-99c4-0421452026b2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:49018","PortSpecifier":{"PortValue":49018}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783616069,"nanos":654525410},"http":{"id":"091b10a5-c922-4cec-99c4-0421452026b2","method":"POST","headers":{":authority":"e2e-shared-b-6bf011.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T16:54:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"091b10a5-c922-4cec-99c4-0421452026b2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1KhuQhOZtbdl19OKB_9tsrTcMvpVDVpx3psQ3HcJUvzBQZDGUZv4PIg7MI9ji"}
{"level":"debug","ts":"2026-07-09T16:54:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"091b10a5-c922-4cec-99c4-0421452026b2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-6bf011.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1KhuQhOZtbdl19OKB_9tsrTcMvpVDVpx3psQ3HcJUvzBQZDGUZv4PIg7MI9ji\"}"}
{"level":"debug","ts":"2026-07-09T16:54:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"091b10a5-c922-4cec-99c4-0421452026b2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-6bf011.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1cc80ee8-d53e-4803-a2b1-60268461dfe3","keyName":"e2e-sub-iso-a5a15b","subscription":"e2e-shared-sub-fe8f29","tenant":"e2e-shared-b-6bf011","userId":"1cc80ee8-d53e-4803-a2b1-60268461dfe3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T16:54:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"091b10a5-c922-4cec-99c4-0421452026b2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T16:54:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"091b10a5-c922-4cec-99c4-0421452026b2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:54:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"091b10a5-c922-4cec-99c4-0421452026b2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:54:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"091b10a5-c922-4cec-99c4-0421452026b2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6bf011/sub-test-model-6bf011\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:54:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"091b10a5-c922-4cec-99c4-0421452026b2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T16:54:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"091b10a5-c922-4cec-99c4-0421452026b2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-09T16:54:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"091b10a5-c922-4cec-99c4-0421452026b2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T16:54:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"091b10a5-c922-4cec-99c4-0421452026b2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-fe8f29"}
{"level":"info","ts":"2026-07-09T16:54:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"091b10a5-c922-4cec-99c4-0421452026b2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T16:54:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"091b10a5-c922-4cec-99c4-0421452026b2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70310f404112f3a9e2cdb614f3592e8c65292837bf6f4bf442536b94eab87919","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:54:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:54:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70310f404112f3a9e2cdb614f3592e8c65292837bf6f4bf442536b94eab87919","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70310f404112f3a9e2cdb614f3592e8c65292837bf6f4bf442536b94eab87919","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70310f404112f3a9e2cdb614f3592e8c65292837bf6f4bf442536b94eab87919","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70310f404112f3a9e2cdb614f3592e8c65292837bf6f4bf442536b94eab87919"}
{"level":"debug","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70310f404112f3a9e2cdb614f3592e8c65292837bf6f4bf442536b94eab87919","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70310f404112f3a9e2cdb614f3592e8c65292837bf6f4bf442536b94eab87919"}
{"level":"debug","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70310f404112f3a9e2cdb614f3592e8c65292837bf6f4bf442536b94eab87919","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:54:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:54:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70310f404112f3a9e2cdb614f3592e8c65292837bf6f4bf442536b94eab87919"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70310f404112f3a9e2cdb614f3592e8c65292837bf6f4bf442536b94eab87919","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70310f404112f3a9e2cdb614f3592e8c65292837bf6f4bf442536b94eab87919","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:54:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:54:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70310f404112f3a9e2cdb614f3592e8c65292837bf6f4bf442536b94eab87919","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70310f404112f3a9e2cdb614f3592e8c65292837bf6f4bf442536b94eab87919","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70310f404112f3a9e2cdb614f3592e8c65292837bf6f4bf442536b94eab87919","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70310f404112f3a9e2cdb614f3592e8c65292837bf6f4bf442536b94eab87919"}
{"level":"debug","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70310f404112f3a9e2cdb614f3592e8c65292837bf6f4bf442536b94eab87919","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70310f404112f3a9e2cdb614f3592e8c65292837bf6f4bf442536b94eab87919"}
{"level":"debug","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70310f404112f3a9e2cdb614f3592e8c65292837bf6f4bf442536b94eab87919","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:54:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:54:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70310f404112f3a9e2cdb614f3592e8c65292837bf6f4bf442536b94eab87919"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70310f404112f3a9e2cdb614f3592e8c65292837bf6f4bf442536b94eab87919","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70310f404112f3a9e2cdb614f3592e8c65292837bf6f4bf442536b94eab87919","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:54:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:54:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70310f404112f3a9e2cdb614f3592e8c65292837bf6f4bf442536b94eab87919","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70310f404112f3a9e2cdb614f3592e8c65292837bf6f4bf442536b94eab87919","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70310f404112f3a9e2cdb614f3592e8c65292837bf6f4bf442536b94eab87919","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70310f404112f3a9e2cdb614f3592e8c65292837bf6f4bf442536b94eab87919"}
{"level":"debug","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70310f404112f3a9e2cdb614f3592e8c65292837bf6f4bf442536b94eab87919","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70310f404112f3a9e2cdb614f3592e8c65292837bf6f4bf442536b94eab87919"}
{"level":"debug","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70310f404112f3a9e2cdb614f3592e8c65292837bf6f4bf442536b94eab87919","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:54:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:54:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70310f404112f3a9e2cdb614f3592e8c65292837bf6f4bf442536b94eab87919"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70310f404112f3a9e2cdb614f3592e8c65292837bf6f4bf442536b94eab87919","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70310f404112f3a9e2cdb614f3592e8c65292837bf6f4bf442536b94eab87919","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:54:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:54:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70310f404112f3a9e2cdb614f3592e8c65292837bf6f4bf442536b94eab87919","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d353bf32b5aefddcfe41db7674600aa0dbd623c20cc743fb6e06725a75e5f00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:54:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:54:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70310f404112f3a9e2cdb614f3592e8c65292837bf6f4bf442536b94eab87919"}
{"level":"info","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d353bf32b5aefddcfe41db7674600aa0dbd623c20cc743fb6e06725a75e5f00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70310f404112f3a9e2cdb614f3592e8c65292837bf6f4bf442536b94eab87919","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:54:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:54:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70310f404112f3a9e2cdb614f3592e8c65292837bf6f4bf442536b94eab87919"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70310f404112f3a9e2cdb614f3592e8c65292837bf6f4bf442536b94eab87919","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d353bf32b5aefddcfe41db7674600aa0dbd623c20cc743fb6e06725a75e5f00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:54:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:54:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d353bf32b5aefddcfe41db7674600aa0dbd623c20cc743fb6e06725a75e5f00"}
{"level":"info","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d353bf32b5aefddcfe41db7674600aa0dbd623c20cc743fb6e06725a75e5f00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70310f404112f3a9e2cdb614f3592e8c65292837bf6f4bf442536b94eab87919","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:54:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:54:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70310f404112f3a9e2cdb614f3592e8c65292837bf6f4bf442536b94eab87919","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d353bf32b5aefddcfe41db7674600aa0dbd623c20cc743fb6e06725a75e5f00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:54:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:54:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d353bf32b5aefddcfe41db7674600aa0dbd623c20cc743fb6e06725a75e5f00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70310f404112f3a9e2cdb614f3592e8c65292837bf6f4bf442536b94eab87919"}
{"level":"info","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d353bf32b5aefddcfe41db7674600aa0dbd623c20cc743fb6e06725a75e5f00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70310f404112f3a9e2cdb614f3592e8c65292837bf6f4bf442536b94eab87919","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:54:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:54:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70310f404112f3a9e2cdb614f3592e8c65292837bf6f4bf442536b94eab87919"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d353bf32b5aefddcfe41db7674600aa0dbd623c20cc743fb6e06725a75e5f00"}
{"level":"info","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70310f404112f3a9e2cdb614f3592e8c65292837bf6f4bf442536b94eab87919","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d353bf32b5aefddcfe41db7674600aa0dbd623c20cc743fb6e06725a75e5f00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70310f404112f3a9e2cdb614f3592e8c65292837bf6f4bf442536b94eab87919","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:54:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:54:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70310f404112f3a9e2cdb614f3592e8c65292837bf6f4bf442536b94eab87919","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70310f404112f3a9e2cdb614f3592e8c65292837bf6f4bf442536b94eab87919","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70310f404112f3a9e2cdb614f3592e8c65292837bf6f4bf442536b94eab87919","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70310f404112f3a9e2cdb614f3592e8c65292837bf6f4bf442536b94eab87919"}
{"level":"debug","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70310f404112f3a9e2cdb614f3592e8c65292837bf6f4bf442536b94eab87919","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:54:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:54:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70310f404112f3a9e2cdb614f3592e8c65292837bf6f4bf442536b94eab87919"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d353bf32b5aefddcfe41db7674600aa0dbd623c20cc743fb6e06725a75e5f00"}
{"level":"info","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70310f404112f3a9e2cdb614f3592e8c65292837bf6f4bf442536b94eab87919","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70310f404112f3a9e2cdb614f3592e8c65292837bf6f4bf442536b94eab87919","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:54:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:54:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70310f404112f3a9e2cdb614f3592e8c65292837bf6f4bf442536b94eab87919"}
{"level":"info","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70310f404112f3a9e2cdb614f3592e8c65292837bf6f4bf442536b94eab87919","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70310f404112f3a9e2cdb614f3592e8c65292837bf6f4bf442536b94eab87919","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70310f404112f3a9e2cdb614f3592e8c65292837bf6f4bf442536b94eab87919","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70310f404112f3a9e2cdb614f3592e8c65292837bf6f4bf442536b94eab87919"}
{"level":"debug","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70310f404112f3a9e2cdb614f3592e8c65292837bf6f4bf442536b94eab87919","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70310f404112f3a9e2cdb614f3592e8c65292837bf6f4bf442536b94eab87919"}
{"level":"debug","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70310f404112f3a9e2cdb614f3592e8c65292837bf6f4bf442536b94eab87919","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:54:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:54:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70310f404112f3a9e2cdb614f3592e8c65292837bf6f4bf442536b94eab87919"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70310f404112f3a9e2cdb614f3592e8c65292837bf6f4bf442536b94eab87919","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70310f404112f3a9e2cdb614f3592e8c65292837bf6f4bf442536b94eab87919","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:54:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:54:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70310f404112f3a9e2cdb614f3592e8c65292837bf6f4bf442536b94eab87919","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70310f404112f3a9e2cdb614f3592e8c65292837bf6f4bf442536b94eab87919","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70310f404112f3a9e2cdb614f3592e8c65292837bf6f4bf442536b94eab87919","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70310f404112f3a9e2cdb614f3592e8c65292837bf6f4bf442536b94eab87919"}
{"level":"debug","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70310f404112f3a9e2cdb614f3592e8c65292837bf6f4bf442536b94eab87919","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70310f404112f3a9e2cdb614f3592e8c65292837bf6f4bf442536b94eab87919"}
{"level":"debug","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70310f404112f3a9e2cdb614f3592e8c65292837bf6f4bf442536b94eab87919","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:54:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:54:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70310f404112f3a9e2cdb614f3592e8c65292837bf6f4bf442536b94eab87919"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70310f404112f3a9e2cdb614f3592e8c65292837bf6f4bf442536b94eab87919","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70310f404112f3a9e2cdb614f3592e8c65292837bf6f4bf442536b94eab87919","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70310f404112f3a9e2cdb614f3592e8c65292837bf6f4bf442536b94eab87919"}
{"level":"debug","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2760ae0a4925f92dd3a44348ee789fe74d2ad983418447edeeec31e5e967debd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:54:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:54:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2760ae0a4925f92dd3a44348ee789fe74d2ad983418447edeeec31e5e967debd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2760ae0a4925f92dd3a44348ee789fe74d2ad983418447edeeec31e5e967debd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2760ae0a4925f92dd3a44348ee789fe74d2ad983418447edeeec31e5e967debd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2760ae0a4925f92dd3a44348ee789fe74d2ad983418447edeeec31e5e967debd"}
{"level":"debug","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2760ae0a4925f92dd3a44348ee789fe74d2ad983418447edeeec31e5e967debd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2760ae0a4925f92dd3a44348ee789fe74d2ad983418447edeeec31e5e967debd"}
{"level":"debug","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2760ae0a4925f92dd3a44348ee789fe74d2ad983418447edeeec31e5e967debd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:54:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:54:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2760ae0a4925f92dd3a44348ee789fe74d2ad983418447edeeec31e5e967debd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2760ae0a4925f92dd3a44348ee789fe74d2ad983418447edeeec31e5e967debd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2760ae0a4925f92dd3a44348ee789fe74d2ad983418447edeeec31e5e967debd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2760ae0a4925f92dd3a44348ee789fe74d2ad983418447edeeec31e5e967debd"}
{"level":"debug","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2a2059953cd614c36aed4a45db6d306c50fb31034655b0c99db042cc065aa1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:54:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:54:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2a2059953cd614c36aed4a45db6d306c50fb31034655b0c99db042cc065aa1d"}
{"level":"info","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2a2059953cd614c36aed4a45db6d306c50fb31034655b0c99db042cc065aa1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2a2059953cd614c36aed4a45db6d306c50fb31034655b0c99db042cc065aa1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2a2059953cd614c36aed4a45db6d306c50fb31034655b0c99db042cc065aa1d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2a2059953cd614c36aed4a45db6d306c50fb31034655b0c99db042cc065aa1d"}
{"level":"debug","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2a2059953cd614c36aed4a45db6d306c50fb31034655b0c99db042cc065aa1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:54:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:54:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f2a2059953cd614c36aed4a45db6d306c50fb31034655b0c99db042cc065aa1d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2a2059953cd614c36aed4a45db6d306c50fb31034655b0c99db042cc065aa1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2a2059953cd614c36aed4a45db6d306c50fb31034655b0c99db042cc065aa1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:54:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:54:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2a2059953cd614c36aed4a45db6d306c50fb31034655b0c99db042cc065aa1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2a2059953cd614c36aed4a45db6d306c50fb31034655b0c99db042cc065aa1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2a2059953cd614c36aed4a45db6d306c50fb31034655b0c99db042cc065aa1d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2a2059953cd614c36aed4a45db6d306c50fb31034655b0c99db042cc065aa1d"}
{"level":"debug","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bf4866826450c6e5e75e27e6ee08dd340f68d74847a0d0e3c322a8fdc473355","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:54:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:54:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6bf4866826450c6e5e75e27e6ee08dd340f68d74847a0d0e3c322a8fdc473355","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bf4866826450c6e5e75e27e6ee08dd340f68d74847a0d0e3c322a8fdc473355","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2a2059953cd614c36aed4a45db6d306c50fb31034655b0c99db042cc065aa1d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2a2059953cd614c36aed4a45db6d306c50fb31034655b0c99db042cc065aa1d"}
{"level":"debug","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bf4866826450c6e5e75e27e6ee08dd340f68d74847a0d0e3c322a8fdc473355","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:54:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:54:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6bf4866826450c6e5e75e27e6ee08dd340f68d74847a0d0e3c322a8fdc473355","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bf4866826450c6e5e75e27e6ee08dd340f68d74847a0d0e3c322a8fdc473355","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bf4866826450c6e5e75e27e6ee08dd340f68d74847a0d0e3c322a8fdc473355"}
{"level":"debug","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bf4866826450c6e5e75e27e6ee08dd340f68d74847a0d0e3c322a8fdc473355","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2a2059953cd614c36aed4a45db6d306c50fb31034655b0c99db042cc065aa1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:54:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:54:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f2a2059953cd614c36aed4a45db6d306c50fb31034655b0c99db042cc065aa1d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bf4866826450c6e5e75e27e6ee08dd340f68d74847a0d0e3c322a8fdc473355"}
{"level":"info","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2a2059953cd614c36aed4a45db6d306c50fb31034655b0c99db042cc065aa1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2a2059953cd614c36aed4a45db6d306c50fb31034655b0c99db042cc065aa1d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2a2059953cd614c36aed4a45db6d306c50fb31034655b0c99db042cc065aa1d"}
{"level":"debug","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b52c0e0f68686dcfb5ba58e26bd5d52f59bf7d638d42db746c77324e32a446ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:54:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:54:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b52c0e0f68686dcfb5ba58e26bd5d52f59bf7d638d42db746c77324e32a446ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b52c0e0f68686dcfb5ba58e26bd5d52f59bf7d638d42db746c77324e32a446ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:54:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:54:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b52c0e0f68686dcfb5ba58e26bd5d52f59bf7d638d42db746c77324e32a446ad"}
{"level":"info","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b52c0e0f68686dcfb5ba58e26bd5d52f59bf7d638d42db746c77324e32a446ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b52c0e0f68686dcfb5ba58e26bd5d52f59bf7d638d42db746c77324e32a446ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:54:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:54:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b52c0e0f68686dcfb5ba58e26bd5d52f59bf7d638d42db746c77324e32a446ad","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b52c0e0f68686dcfb5ba58e26bd5d52f59bf7d638d42db746c77324e32a446ad\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bf4866826450c6e5e75e27e6ee08dd340f68d74847a0d0e3c322a8fdc473355","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:54:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:54:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6bf4866826450c6e5e75e27e6ee08dd340f68d74847a0d0e3c322a8fdc473355"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b52c0e0f68686dcfb5ba58e26bd5d52f59bf7d638d42db746c77324e32a446ad"}
{"level":"info","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6bf4866826450c6e5e75e27e6ee08dd340f68d74847a0d0e3c322a8fdc473355","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b52c0e0f68686dcfb5ba58e26bd5d52f59bf7d638d42db746c77324e32a446ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bf4866826450c6e5e75e27e6ee08dd340f68d74847a0d0e3c322a8fdc473355","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b52c0e0f68686dcfb5ba58e26bd5d52f59bf7d638d42db746c77324e32a446ad"}
{"level":"info","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bf4866826450c6e5e75e27e6ee08dd340f68d74847a0d0e3c322a8fdc473355"}
{"level":"debug","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b52c0e0f68686dcfb5ba58e26bd5d52f59bf7d638d42db746c77324e32a446ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:54:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:54:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b52c0e0f68686dcfb5ba58e26bd5d52f59bf7d638d42db746c77324e32a446ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b52c0e0f68686dcfb5ba58e26bd5d52f59bf7d638d42db746c77324e32a446ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c17f75bd00e256368d3f83b26dbbd4067fb2c822425cb7bca8cf519e4a45b3c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:54:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:54:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c17f75bd00e256368d3f83b26dbbd4067fb2c822425cb7bca8cf519e4a45b3c7"}
{"level":"info","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c17f75bd00e256368d3f83b26dbbd4067fb2c822425cb7bca8cf519e4a45b3c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b52c0e0f68686dcfb5ba58e26bd5d52f59bf7d638d42db746c77324e32a446ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:54:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:54:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b52c0e0f68686dcfb5ba58e26bd5d52f59bf7d638d42db746c77324e32a446ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c17f75bd00e256368d3f83b26dbbd4067fb2c822425cb7bca8cf519e4a45b3c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:54:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:54:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c17f75bd00e256368d3f83b26dbbd4067fb2c822425cb7bca8cf519e4a45b3c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b52c0e0f68686dcfb5ba58e26bd5d52f59bf7d638d42db746c77324e32a446ad"}
{"level":"info","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c17f75bd00e256368d3f83b26dbbd4067fb2c822425cb7bca8cf519e4a45b3c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b52c0e0f68686dcfb5ba58e26bd5d52f59bf7d638d42db746c77324e32a446ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:54:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:54:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b52c0e0f68686dcfb5ba58e26bd5d52f59bf7d638d42db746c77324e32a446ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b52c0e0f68686dcfb5ba58e26bd5d52f59bf7d638d42db746c77324e32a446ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c17f75bd00e256368d3f83b26dbbd4067fb2c822425cb7bca8cf519e4a45b3c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:54:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:54:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c17f75bd00e256368d3f83b26dbbd4067fb2c822425cb7bca8cf519e4a45b3c7"}
{"level":"info","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c17f75bd00e256368d3f83b26dbbd4067fb2c822425cb7bca8cf519e4a45b3c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b52c0e0f68686dcfb5ba58e26bd5d52f59bf7d638d42db746c77324e32a446ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:54:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:54:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b52c0e0f68686dcfb5ba58e26bd5d52f59bf7d638d42db746c77324e32a446ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c17f75bd00e256368d3f83b26dbbd4067fb2c822425cb7bca8cf519e4a45b3c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:54:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:54:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c17f75bd00e256368d3f83b26dbbd4067fb2c822425cb7bca8cf519e4a45b3c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b52c0e0f68686dcfb5ba58e26bd5d52f59bf7d638d42db746c77324e32a446ad"}
{"level":"info","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c17f75bd00e256368d3f83b26dbbd4067fb2c822425cb7bca8cf519e4a45b3c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b52c0e0f68686dcfb5ba58e26bd5d52f59bf7d638d42db746c77324e32a446ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:54:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:54:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b52c0e0f68686dcfb5ba58e26bd5d52f59bf7d638d42db746c77324e32a446ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b52c0e0f68686dcfb5ba58e26bd5d52f59bf7d638d42db746c77324e32a446ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5340ab49c7e0047dd31bd618e2c9a5708884b292d1aa7696a001df90bd2e99ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:54:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:54:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c17f75bd00e256368d3f83b26dbbd4067fb2c822425cb7bca8cf519e4a45b3c7"}
{"level":"info","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5340ab49c7e0047dd31bd618e2c9a5708884b292d1aa7696a001df90bd2e99ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c17f75bd00e256368d3f83b26dbbd4067fb2c822425cb7bca8cf519e4a45b3c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b52c0e0f68686dcfb5ba58e26bd5d52f59bf7d638d42db746c77324e32a446ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:54:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:54:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b52c0e0f68686dcfb5ba58e26bd5d52f59bf7d638d42db746c77324e32a446ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5340ab49c7e0047dd31bd618e2c9a5708884b292d1aa7696a001df90bd2e99ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b52c0e0f68686dcfb5ba58e26bd5d52f59bf7d638d42db746c77324e32a446ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b52c0e0f68686dcfb5ba58e26bd5d52f59bf7d638d42db746c77324e32a446ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5340ab49c7e0047dd31bd618e2c9a5708884b292d1aa7696a001df90bd2e99ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b52c0e0f68686dcfb5ba58e26bd5d52f59bf7d638d42db746c77324e32a446ad"}
{"level":"debug","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b52c0e0f68686dcfb5ba58e26bd5d52f59bf7d638d42db746c77324e32a446ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:54:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:54:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b52c0e0f68686dcfb5ba58e26bd5d52f59bf7d638d42db746c77324e32a446ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b52c0e0f68686dcfb5ba58e26bd5d52f59bf7d638d42db746c77324e32a446ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5340ab49c7e0047dd31bd618e2c9a5708884b292d1aa7696a001df90bd2e99ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:54:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:54:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5340ab49c7e0047dd31bd618e2c9a5708884b292d1aa7696a001df90bd2e99ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b52c0e0f68686dcfb5ba58e26bd5d52f59bf7d638d42db746c77324e32a446ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5340ab49c7e0047dd31bd618e2c9a5708884b292d1aa7696a001df90bd2e99ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5340ab49c7e0047dd31bd618e2c9a5708884b292d1aa7696a001df90bd2e99ce"}
{"level":"info","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e63db8f73c95218848bd0f29610fde5905a72fb239f3e875916d57db32042928"}
{"level":"info","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c17f75bd00e256368d3f83b26dbbd4067fb2c822425cb7bca8cf519e4a45b3c7"}
{"level":"debug","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5340ab49c7e0047dd31bd618e2c9a5708884b292d1aa7696a001df90bd2e99ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:54:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:54:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5340ab49c7e0047dd31bd618e2c9a5708884b292d1aa7696a001df90bd2e99ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b52c0e0f68686dcfb5ba58e26bd5d52f59bf7d638d42db746c77324e32a446ad"}
{"level":"info","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a7b0738000e412607d7ea1fdb5045307f156f778a74cea60b491a0b59a799835"}
{"level":"info","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5340ab49c7e0047dd31bd618e2c9a5708884b292d1aa7696a001df90bd2e99ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5340ab49c7e0047dd31bd618e2c9a5708884b292d1aa7696a001df90bd2e99ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:54:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:54:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5340ab49c7e0047dd31bd618e2c9a5708884b292d1aa7696a001df90bd2e99ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5340ab49c7e0047dd31bd618e2c9a5708884b292d1aa7696a001df90bd2e99ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5340ab49c7e0047dd31bd618e2c9a5708884b292d1aa7696a001df90bd2e99ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5340ab49c7e0047dd31bd618e2c9a5708884b292d1aa7696a001df90bd2e99ce"}
{"level":"debug","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5340ab49c7e0047dd31bd618e2c9a5708884b292d1aa7696a001df90bd2e99ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5340ab49c7e0047dd31bd618e2c9a5708884b292d1aa7696a001df90bd2e99ce"}
{"level":"info","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3d3c027a99c29975cb300025ae2e0980a4883f7e86edddb73ae7dafbc4598813"}
{"level":"info","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b8fe4d702dbc285955087444b8efd62d502956203de006c02522b363d4ccbfe9"}
{"level":"debug","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5340ab49c7e0047dd31bd618e2c9a5708884b292d1aa7696a001df90bd2e99ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:54:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:54:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5340ab49c7e0047dd31bd618e2c9a5708884b292d1aa7696a001df90bd2e99ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5340ab49c7e0047dd31bd618e2c9a5708884b292d1aa7696a001df90bd2e99ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5340ab49c7e0047dd31bd618e2c9a5708884b292d1aa7696a001df90bd2e99ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:54:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:54:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5340ab49c7e0047dd31bd618e2c9a5708884b292d1aa7696a001df90bd2e99ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5340ab49c7e0047dd31bd618e2c9a5708884b292d1aa7696a001df90bd2e99ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5340ab49c7e0047dd31bd618e2c9a5708884b292d1aa7696a001df90bd2e99ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5340ab49c7e0047dd31bd618e2c9a5708884b292d1aa7696a001df90bd2e99ce"}
{"level":"debug","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5340ab49c7e0047dd31bd618e2c9a5708884b292d1aa7696a001df90bd2e99ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5340ab49c7e0047dd31bd618e2c9a5708884b292d1aa7696a001df90bd2e99ce"}
{"level":"info","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f9dbe87ef7b493732d94549751707a20a9c8b7f6d399cc03ca3ff4285131f3a"}
{"level":"info","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f084e7aced63a64f9ce96730107f7defc798dfd183fbed7b023afb811f3f0237"}
{"level":"info","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b67bd5f6b925161e13c6b860fd4b0579572ae86bc3dc0e2358eca0467bd8c489"}
{"level":"debug","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5340ab49c7e0047dd31bd618e2c9a5708884b292d1aa7696a001df90bd2e99ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:54:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:54:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5340ab49c7e0047dd31bd618e2c9a5708884b292d1aa7696a001df90bd2e99ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5340ab49c7e0047dd31bd618e2c9a5708884b292d1aa7696a001df90bd2e99ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5340ab49c7e0047dd31bd618e2c9a5708884b292d1aa7696a001df90bd2e99ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:54:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:54:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5340ab49c7e0047dd31bd618e2c9a5708884b292d1aa7696a001df90bd2e99ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5340ab49c7e0047dd31bd618e2c9a5708884b292d1aa7696a001df90bd2e99ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5340ab49c7e0047dd31bd618e2c9a5708884b292d1aa7696a001df90bd2e99ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5340ab49c7e0047dd31bd618e2c9a5708884b292d1aa7696a001df90bd2e99ce"}
{"level":"debug","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5340ab49c7e0047dd31bd618e2c9a5708884b292d1aa7696a001df90bd2e99ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5340ab49c7e0047dd31bd618e2c9a5708884b292d1aa7696a001df90bd2e99ce"}
{"level":"info","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f7e262befa2a458a8a550274199ce6a030d2cfbdbdb9629390096bfcbfe95cb1"}
{"level":"info","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b64cba4c944bfc4d4da127d8d5949f9fc0207a7cd4574f0ab943974236bb1bd2"}
{"level":"info","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d5561c7bea7f3444bdefb339d78d18182de40fc55c90b93722fbedaeddbe4abd"}
{"level":"info","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fce5e68f397ffedd5a539b62f852f9174bacc8b0693de7f6afbb61d615fdf340"}
{"level":"info","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3f49af9b4433c8282e05a2e09c92c23aaaa3c0fba7c988841bd5bd9999163769"}
{"level":"info","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d492ce5b3717fedbe5c35549e6f42275a709b7b700c970425a3cdcbb7129451b"}
{"level":"debug","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5340ab49c7e0047dd31bd618e2c9a5708884b292d1aa7696a001df90bd2e99ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:54:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:54:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5340ab49c7e0047dd31bd618e2c9a5708884b292d1aa7696a001df90bd2e99ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/af9862e59df7f83691675182ccce3f2823ce13063707147bf278326a86e487c8"}
{"level":"info","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6295169b0a450aef2efc7b39e59cffe3a6e80f0aa7e851f89c8339a8320b77f1"}
{"level":"info","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5340ab49c7e0047dd31bd618e2c9a5708884b292d1aa7696a001df90bd2e99ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5340ab49c7e0047dd31bd618e2c9a5708884b292d1aa7696a001df90bd2e99ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:54:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:54:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5340ab49c7e0047dd31bd618e2c9a5708884b292d1aa7696a001df90bd2e99ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5340ab49c7e0047dd31bd618e2c9a5708884b292d1aa7696a001df90bd2e99ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5340ab49c7e0047dd31bd618e2c9a5708884b292d1aa7696a001df90bd2e99ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:54:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5340ab49c7e0047dd31bd618e2c9a5708884b292d1aa7696a001df90bd2e99ce"}
{"level":"info","ts":"2026-07-09T16:54:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4b198f631b7050f5e9ea144aa10b29f9e25289def4c3437487214d035713e9ef"}
{"level":"debug","ts":"2026-07-09T16:54:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5340ab49c7e0047dd31bd618e2c9a5708884b292d1aa7696a001df90bd2e99ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:54:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5340ab49c7e0047dd31bd618e2c9a5708884b292d1aa7696a001df90bd2e99ce"}
{"level":"debug","ts":"2026-07-09T16:54:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5340ab49c7e0047dd31bd618e2c9a5708884b292d1aa7696a001df90bd2e99ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:54:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:54:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5340ab49c7e0047dd31bd618e2c9a5708884b292d1aa7696a001df90bd2e99ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:54:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5340ab49c7e0047dd31bd618e2c9a5708884b292d1aa7696a001df90bd2e99ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:54:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5340ab49c7e0047dd31bd618e2c9a5708884b292d1aa7696a001df90bd2e99ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:54:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5340ab49c7e0047dd31bd618e2c9a5708884b292d1aa7696a001df90bd2e99ce"}
{"level":"debug","ts":"2026-07-09T16:55:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27b1846bbb07e61ad528f27deaaba0d1bfd5e3ab3f8f1596ddef97ddc1ead7b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:55:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:55:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:55:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27b1846bbb07e61ad528f27deaaba0d1bfd5e3ab3f8f1596ddef97ddc1ead7b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27b1846bbb07e61ad528f27deaaba0d1bfd5e3ab3f8f1596ddef97ddc1ead7b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27b1846bbb07e61ad528f27deaaba0d1bfd5e3ab3f8f1596ddef97ddc1ead7b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:55:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27b1846bbb07e61ad528f27deaaba0d1bfd5e3ab3f8f1596ddef97ddc1ead7b5"}
{"level":"debug","ts":"2026-07-09T16:55:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27b1846bbb07e61ad528f27deaaba0d1bfd5e3ab3f8f1596ddef97ddc1ead7b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:55:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27b1846bbb07e61ad528f27deaaba0d1bfd5e3ab3f8f1596ddef97ddc1ead7b5"}
{"level":"debug","ts":"2026-07-09T16:55:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27b1846bbb07e61ad528f27deaaba0d1bfd5e3ab3f8f1596ddef97ddc1ead7b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:55:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:55:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27b1846bbb07e61ad528f27deaaba0d1bfd5e3ab3f8f1596ddef97ddc1ead7b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:55:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27b1846bbb07e61ad528f27deaaba0d1bfd5e3ab3f8f1596ddef97ddc1ead7b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27b1846bbb07e61ad528f27deaaba0d1bfd5e3ab3f8f1596ddef97ddc1ead7b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:55:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:55:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:55:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27b1846bbb07e61ad528f27deaaba0d1bfd5e3ab3f8f1596ddef97ddc1ead7b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27b1846bbb07e61ad528f27deaaba0d1bfd5e3ab3f8f1596ddef97ddc1ead7b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27b1846bbb07e61ad528f27deaaba0d1bfd5e3ab3f8f1596ddef97ddc1ead7b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:55:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27b1846bbb07e61ad528f27deaaba0d1bfd5e3ab3f8f1596ddef97ddc1ead7b5"}
{"level":"debug","ts":"2026-07-09T16:55:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27b1846bbb07e61ad528f27deaaba0d1bfd5e3ab3f8f1596ddef97ddc1ead7b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:55:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27b1846bbb07e61ad528f27deaaba0d1bfd5e3ab3f8f1596ddef97ddc1ead7b5"}
{"level":"debug","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27b1846bbb07e61ad528f27deaaba0d1bfd5e3ab3f8f1596ddef97ddc1ead7b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27b1846bbb07e61ad528f27deaaba0d1bfd5e3ab3f8f1596ddef97ddc1ead7b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27b1846bbb07e61ad528f27deaaba0d1bfd5e3ab3f8f1596ddef97ddc1ead7b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27b1846bbb07e61ad528f27deaaba0d1bfd5e3ab3f8f1596ddef97ddc1ead7b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27b1846bbb07e61ad528f27deaaba0d1bfd5e3ab3f8f1596ddef97ddc1ead7b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27b1846bbb07e61ad528f27deaaba0d1bfd5e3ab3f8f1596ddef97ddc1ead7b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27b1846bbb07e61ad528f27deaaba0d1bfd5e3ab3f8f1596ddef97ddc1ead7b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27b1846bbb07e61ad528f27deaaba0d1bfd5e3ab3f8f1596ddef97ddc1ead7b5"}
{"level":"debug","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27b1846bbb07e61ad528f27deaaba0d1bfd5e3ab3f8f1596ddef97ddc1ead7b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27b1846bbb07e61ad528f27deaaba0d1bfd5e3ab3f8f1596ddef97ddc1ead7b5"}
{"level":"debug","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27b1846bbb07e61ad528f27deaaba0d1bfd5e3ab3f8f1596ddef97ddc1ead7b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27b1846bbb07e61ad528f27deaaba0d1bfd5e3ab3f8f1596ddef97ddc1ead7b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27b1846bbb07e61ad528f27deaaba0d1bfd5e3ab3f8f1596ddef97ddc1ead7b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27b1846bbb07e61ad528f27deaaba0d1bfd5e3ab3f8f1596ddef97ddc1ead7b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27b1846bbb07e61ad528f27deaaba0d1bfd5e3ab3f8f1596ddef97ddc1ead7b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27b1846bbb07e61ad528f27deaaba0d1bfd5e3ab3f8f1596ddef97ddc1ead7b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d31a9df17f866f844504e9fa3b7fae696172b110de807923c9068b89c44457b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27b1846bbb07e61ad528f27deaaba0d1bfd5e3ab3f8f1596ddef97ddc1ead7b5"}
{"level":"info","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d31a9df17f866f844504e9fa3b7fae696172b110de807923c9068b89c44457b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27b1846bbb07e61ad528f27deaaba0d1bfd5e3ab3f8f1596ddef97ddc1ead7b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27b1846bbb07e61ad528f27deaaba0d1bfd5e3ab3f8f1596ddef97ddc1ead7b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d31a9df17f866f844504e9fa3b7fae696172b110de807923c9068b89c44457b"}
{"level":"info","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27b1846bbb07e61ad528f27deaaba0d1bfd5e3ab3f8f1596ddef97ddc1ead7b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d31a9df17f866f844504e9fa3b7fae696172b110de807923c9068b89c44457b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d31a9df17f866f844504e9fa3b7fae696172b110de807923c9068b89c44457b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d31a9df17f866f844504e9fa3b7fae696172b110de807923c9068b89c44457b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27b1846bbb07e61ad528f27deaaba0d1bfd5e3ab3f8f1596ddef97ddc1ead7b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27b1846bbb07e61ad528f27deaaba0d1bfd5e3ab3f8f1596ddef97ddc1ead7b5"}
{"level":"info","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27b1846bbb07e61ad528f27deaaba0d1bfd5e3ab3f8f1596ddef97ddc1ead7b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d31a9df17f866f844504e9fa3b7fae696172b110de807923c9068b89c44457b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d31a9df17f866f844504e9fa3b7fae696172b110de807923c9068b89c44457b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27b1846bbb07e61ad528f27deaaba0d1bfd5e3ab3f8f1596ddef97ddc1ead7b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27b1846bbb07e61ad528f27deaaba0d1bfd5e3ab3f8f1596ddef97ddc1ead7b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d31a9df17f866f844504e9fa3b7fae696172b110de807923c9068b89c44457b"}
{"level":"info","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27b1846bbb07e61ad528f27deaaba0d1bfd5e3ab3f8f1596ddef97ddc1ead7b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d31a9df17f866f844504e9fa3b7fae696172b110de807923c9068b89c44457b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d31a9df17f866f844504e9fa3b7fae696172b110de807923c9068b89c44457b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27b1846bbb07e61ad528f27deaaba0d1bfd5e3ab3f8f1596ddef97ddc1ead7b5"}
{"level":"info","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d31a9df17f866f844504e9fa3b7fae696172b110de807923c9068b89c44457b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27b1846bbb07e61ad528f27deaaba0d1bfd5e3ab3f8f1596ddef97ddc1ead7b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"890c9d6664452a452c0756e89853341160395adc735eb026ba86e5c5c63f005e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"890c9d6664452a452c0756e89853341160395adc735eb026ba86e5c5c63f005e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d31a9df17f866f844504e9fa3b7fae696172b110de807923c9068b89c44457b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d31a9df17f866f844504e9fa3b7fae696172b110de807923c9068b89c44457b"}
{"level":"info","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d31a9df17f866f844504e9fa3b7fae696172b110de807923c9068b89c44457b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"890c9d6664452a452c0756e89853341160395adc735eb026ba86e5c5c63f005e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d31a9df17f866f844504e9fa3b7fae696172b110de807923c9068b89c44457b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d31a9df17f866f844504e9fa3b7fae696172b110de807923c9068b89c44457b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27b1846bbb07e61ad528f27deaaba0d1bfd5e3ab3f8f1596ddef97ddc1ead7b5"}
{"level":"info","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d31a9df17f866f844504e9fa3b7fae696172b110de807923c9068b89c44457b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"890c9d6664452a452c0756e89853341160395adc735eb026ba86e5c5c63f005e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"890c9d6664452a452c0756e89853341160395adc735eb026ba86e5c5c63f005e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d31a9df17f866f844504e9fa3b7fae696172b110de807923c9068b89c44457b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"890c9d6664452a452c0756e89853341160395adc735eb026ba86e5c5c63f005e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/890c9d6664452a452c0756e89853341160395adc735eb026ba86e5c5c63f005e"}
{"level":"debug","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"890c9d6664452a452c0756e89853341160395adc735eb026ba86e5c5c63f005e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["890c9d6664452a452c0756e89853341160395adc735eb026ba86e5c5c63f005e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d31a9df17f866f844504e9fa3b7fae696172b110de807923c9068b89c44457b"}
{"level":"info","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"890c9d6664452a452c0756e89853341160395adc735eb026ba86e5c5c63f005e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"890c9d6664452a452c0756e89853341160395adc735eb026ba86e5c5c63f005e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/890c9d6664452a452c0756e89853341160395adc735eb026ba86e5c5c63f005e"}
{"level":"info","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"890c9d6664452a452c0756e89853341160395adc735eb026ba86e5c5c63f005e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"890c9d6664452a452c0756e89853341160395adc735eb026ba86e5c5c63f005e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"890c9d6664452a452c0756e89853341160395adc735eb026ba86e5c5c63f005e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/890c9d6664452a452c0756e89853341160395adc735eb026ba86e5c5c63f005e"}
{"level":"debug","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"890c9d6664452a452c0756e89853341160395adc735eb026ba86e5c5c63f005e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/890c9d6664452a452c0756e89853341160395adc735eb026ba86e5c5c63f005e"}
{"level":"debug","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"890c9d6664452a452c0756e89853341160395adc735eb026ba86e5c5c63f005e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["890c9d6664452a452c0756e89853341160395adc735eb026ba86e5c5c63f005e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"890c9d6664452a452c0756e89853341160395adc735eb026ba86e5c5c63f005e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"890c9d6664452a452c0756e89853341160395adc735eb026ba86e5c5c63f005e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"890c9d6664452a452c0756e89853341160395adc735eb026ba86e5c5c63f005e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"890c9d6664452a452c0756e89853341160395adc735eb026ba86e5c5c63f005e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"890c9d6664452a452c0756e89853341160395adc735eb026ba86e5c5c63f005e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/890c9d6664452a452c0756e89853341160395adc735eb026ba86e5c5c63f005e"}
{"level":"debug","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"890c9d6664452a452c0756e89853341160395adc735eb026ba86e5c5c63f005e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/890c9d6664452a452c0756e89853341160395adc735eb026ba86e5c5c63f005e"}
{"level":"debug","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"890c9d6664452a452c0756e89853341160395adc735eb026ba86e5c5c63f005e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["890c9d6664452a452c0756e89853341160395adc735eb026ba86e5c5c63f005e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"890c9d6664452a452c0756e89853341160395adc735eb026ba86e5c5c63f005e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"890c9d6664452a452c0756e89853341160395adc735eb026ba86e5c5c63f005e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"890c9d6664452a452c0756e89853341160395adc735eb026ba86e5c5c63f005e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"890c9d6664452a452c0756e89853341160395adc735eb026ba86e5c5c63f005e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8644d86cafc4cd9af16b9ec4f0241fa5e539ed4326bec578db0ebbfee884aff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/890c9d6664452a452c0756e89853341160395adc735eb026ba86e5c5c63f005e"}
{"level":"info","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8644d86cafc4cd9af16b9ec4f0241fa5e539ed4326bec578db0ebbfee884aff7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"890c9d6664452a452c0756e89853341160395adc735eb026ba86e5c5c63f005e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["890c9d6664452a452c0756e89853341160395adc735eb026ba86e5c5c63f005e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8644d86cafc4cd9af16b9ec4f0241fa5e539ed4326bec578db0ebbfee884aff7"}
{"level":"info","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"890c9d6664452a452c0756e89853341160395adc735eb026ba86e5c5c63f005e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8644d86cafc4cd9af16b9ec4f0241fa5e539ed4326bec578db0ebbfee884aff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8644d86cafc4cd9af16b9ec4f0241fa5e539ed4326bec578db0ebbfee884aff7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8644d86cafc4cd9af16b9ec4f0241fa5e539ed4326bec578db0ebbfee884aff7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"890c9d6664452a452c0756e89853341160395adc735eb026ba86e5c5c63f005e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/890c9d6664452a452c0756e89853341160395adc735eb026ba86e5c5c63f005e"}
{"level":"info","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"890c9d6664452a452c0756e89853341160395adc735eb026ba86e5c5c63f005e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8644d86cafc4cd9af16b9ec4f0241fa5e539ed4326bec578db0ebbfee884aff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8644d86cafc4cd9af16b9ec4f0241fa5e539ed4326bec578db0ebbfee884aff7"}
{"level":"info","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8644d86cafc4cd9af16b9ec4f0241fa5e539ed4326bec578db0ebbfee884aff7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"890c9d6664452a452c0756e89853341160395adc735eb026ba86e5c5c63f005e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8644d86cafc4cd9af16b9ec4f0241fa5e539ed4326bec578db0ebbfee884aff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8644d86cafc4cd9af16b9ec4f0241fa5e539ed4326bec578db0ebbfee884aff7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8644d86cafc4cd9af16b9ec4f0241fa5e539ed4326bec578db0ebbfee884aff7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"890c9d6664452a452c0756e89853341160395adc735eb026ba86e5c5c63f005e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8644d86cafc4cd9af16b9ec4f0241fa5e539ed4326bec578db0ebbfee884aff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8644d86cafc4cd9af16b9ec4f0241fa5e539ed4326bec578db0ebbfee884aff7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/890c9d6664452a452c0756e89853341160395adc735eb026ba86e5c5c63f005e"}
{"level":"error","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8644d86cafc4cd9af16b9ec4f0241fa5e539ed4326bec578db0ebbfee884aff7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8644d86cafc4cd9af16b9ec4f0241fa5e539ed4326bec578db0ebbfee884aff7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8644d86cafc4cd9af16b9ec4f0241fa5e539ed4326bec578db0ebbfee884aff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8644d86cafc4cd9af16b9ec4f0241fa5e539ed4326bec578db0ebbfee884aff7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"890c9d6664452a452c0756e89853341160395adc735eb026ba86e5c5c63f005e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["890c9d6664452a452c0756e89853341160395adc735eb026ba86e5c5c63f005e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8644d86cafc4cd9af16b9ec4f0241fa5e539ed4326bec578db0ebbfee884aff7"}
{"level":"info","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"890c9d6664452a452c0756e89853341160395adc735eb026ba86e5c5c63f005e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8644d86cafc4cd9af16b9ec4f0241fa5e539ed4326bec578db0ebbfee884aff7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"890c9d6664452a452c0756e89853341160395adc735eb026ba86e5c5c63f005e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8644d86cafc4cd9af16b9ec4f0241fa5e539ed4326bec578db0ebbfee884aff7"}
{"level":"debug","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8644d86cafc4cd9af16b9ec4f0241fa5e539ed4326bec578db0ebbfee884aff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8644d86cafc4cd9af16b9ec4f0241fa5e539ed4326bec578db0ebbfee884aff7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/890c9d6664452a452c0756e89853341160395adc735eb026ba86e5c5c63f005e"}
{"level":"info","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8644d86cafc4cd9af16b9ec4f0241fa5e539ed4326bec578db0ebbfee884aff7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8644d86cafc4cd9af16b9ec4f0241fa5e539ed4326bec578db0ebbfee884aff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8644d86cafc4cd9af16b9ec4f0241fa5e539ed4326bec578db0ebbfee884aff7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8644d86cafc4cd9af16b9ec4f0241fa5e539ed4326bec578db0ebbfee884aff7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8644d86cafc4cd9af16b9ec4f0241fa5e539ed4326bec578db0ebbfee884aff7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8644d86cafc4cd9af16b9ec4f0241fa5e539ed4326bec578db0ebbfee884aff7"}
{"level":"debug","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acf4178859bca305c71d5e4e6485cac3530cd08cd789e0fbc278389d8d937ca1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acf4178859bca305c71d5e4e6485cac3530cd08cd789e0fbc278389d8d937ca1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8644d86cafc4cd9af16b9ec4f0241fa5e539ed4326bec578db0ebbfee884aff7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acf4178859bca305c71d5e4e6485cac3530cd08cd789e0fbc278389d8d937ca1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8644d86cafc4cd9af16b9ec4f0241fa5e539ed4326bec578db0ebbfee884aff7"}
{"level":"debug","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acf4178859bca305c71d5e4e6485cac3530cd08cd789e0fbc278389d8d937ca1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acf4178859bca305c71d5e4e6485cac3530cd08cd789e0fbc278389d8d937ca1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acf4178859bca305c71d5e4e6485cac3530cd08cd789e0fbc278389d8d937ca1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acf4178859bca305c71d5e4e6485cac3530cd08cd789e0fbc278389d8d937ca1"}
{"level":"debug","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8644d86cafc4cd9af16b9ec4f0241fa5e539ed4326bec578db0ebbfee884aff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8644d86cafc4cd9af16b9ec4f0241fa5e539ed4326bec578db0ebbfee884aff7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acf4178859bca305c71d5e4e6485cac3530cd08cd789e0fbc278389d8d937ca1"}
{"level":"info","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8644d86cafc4cd9af16b9ec4f0241fa5e539ed4326bec578db0ebbfee884aff7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acf4178859bca305c71d5e4e6485cac3530cd08cd789e0fbc278389d8d937ca1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["acf4178859bca305c71d5e4e6485cac3530cd08cd789e0fbc278389d8d937ca1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acf4178859bca305c71d5e4e6485cac3530cd08cd789e0fbc278389d8d937ca1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8644d86cafc4cd9af16b9ec4f0241fa5e539ed4326bec578db0ebbfee884aff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8644d86cafc4cd9af16b9ec4f0241fa5e539ed4326bec578db0ebbfee884aff7"}
{"level":"info","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8644d86cafc4cd9af16b9ec4f0241fa5e539ed4326bec578db0ebbfee884aff7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acf4178859bca305c71d5e4e6485cac3530cd08cd789e0fbc278389d8d937ca1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acf4178859bca305c71d5e4e6485cac3530cd08cd789e0fbc278389d8d937ca1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8644d86cafc4cd9af16b9ec4f0241fa5e539ed4326bec578db0ebbfee884aff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8644d86cafc4cd9af16b9ec4f0241fa5e539ed4326bec578db0ebbfee884aff7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8644d86cafc4cd9af16b9ec4f0241fa5e539ed4326bec578db0ebbfee884aff7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acf4178859bca305c71d5e4e6485cac3530cd08cd789e0fbc278389d8d937ca1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8644d86cafc4cd9af16b9ec4f0241fa5e539ed4326bec578db0ebbfee884aff7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acf4178859bca305c71d5e4e6485cac3530cd08cd789e0fbc278389d8d937ca1"}
{"level":"debug","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acf4178859bca305c71d5e4e6485cac3530cd08cd789e0fbc278389d8d937ca1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["acf4178859bca305c71d5e4e6485cac3530cd08cd789e0fbc278389d8d937ca1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acf4178859bca305c71d5e4e6485cac3530cd08cd789e0fbc278389d8d937ca1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acf4178859bca305c71d5e4e6485cac3530cd08cd789e0fbc278389d8d937ca1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8644d86cafc4cd9af16b9ec4f0241fa5e539ed4326bec578db0ebbfee884aff7"}
{"level":"debug","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b59d5d2556d07d386db7c285e1299a61dfc27b9e32588b4dea081e925a9cfec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b59d5d2556d07d386db7c285e1299a61dfc27b9e32588b4dea081e925a9cfec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b59d5d2556d07d386db7c285e1299a61dfc27b9e32588b4dea081e925a9cfec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acf4178859bca305c71d5e4e6485cac3530cd08cd789e0fbc278389d8d937ca1"}
{"level":"debug","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b59d5d2556d07d386db7c285e1299a61dfc27b9e32588b4dea081e925a9cfec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:55:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b59d5d2556d07d386db7c285e1299a61dfc27b9e32588b4dea081e925a9cfec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b59d5d2556d07d386db7c285e1299a61dfc27b9e32588b4dea081e925a9cfec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b59d5d2556d07d386db7c285e1299a61dfc27b9e32588b4dea081e925a9cfec"}
{"level":"debug","ts":"2026-07-09T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b59d5d2556d07d386db7c285e1299a61dfc27b9e32588b4dea081e925a9cfec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b59d5d2556d07d386db7c285e1299a61dfc27b9e32588b4dea081e925a9cfec"}
{"level":"debug","ts":"2026-07-09T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a91ee4e79cd641d97e2def52ca9a6865609a491959e6a8329abe084355b9ca91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:55:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:55:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a91ee4e79cd641d97e2def52ca9a6865609a491959e6a8329abe084355b9ca91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a91ee4e79cd641d97e2def52ca9a6865609a491959e6a8329abe084355b9ca91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a91ee4e79cd641d97e2def52ca9a6865609a491959e6a8329abe084355b9ca91","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a91ee4e79cd641d97e2def52ca9a6865609a491959e6a8329abe084355b9ca91"}
{"level":"debug","ts":"2026-07-09T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b59d5d2556d07d386db7c285e1299a61dfc27b9e32588b4dea081e925a9cfec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:55:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:55:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b59d5d2556d07d386db7c285e1299a61dfc27b9e32588b4dea081e925a9cfec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a91ee4e79cd641d97e2def52ca9a6865609a491959e6a8329abe084355b9ca91"}
{"level":"info","ts":"2026-07-09T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b59d5d2556d07d386db7c285e1299a61dfc27b9e32588b4dea081e925a9cfec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a91ee4e79cd641d97e2def52ca9a6865609a491959e6a8329abe084355b9ca91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:55:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:55:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a91ee4e79cd641d97e2def52ca9a6865609a491959e6a8329abe084355b9ca91"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a91ee4e79cd641d97e2def52ca9a6865609a491959e6a8329abe084355b9ca91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b59d5d2556d07d386db7c285e1299a61dfc27b9e32588b4dea081e925a9cfec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:55:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:55:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b59d5d2556d07d386db7c285e1299a61dfc27b9e32588b4dea081e925a9cfec"}
{"level":"info","ts":"2026-07-09T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b59d5d2556d07d386db7c285e1299a61dfc27b9e32588b4dea081e925a9cfec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a91ee4e79cd641d97e2def52ca9a6865609a491959e6a8329abe084355b9ca91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:55:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:55:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a91ee4e79cd641d97e2def52ca9a6865609a491959e6a8329abe084355b9ca91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b59d5d2556d07d386db7c285e1299a61dfc27b9e32588b4dea081e925a9cfec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:55:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:55:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b59d5d2556d07d386db7c285e1299a61dfc27b9e32588b4dea081e925a9cfec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a91ee4e79cd641d97e2def52ca9a6865609a491959e6a8329abe084355b9ca91"}
{"level":"info","ts":"2026-07-09T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b59d5d2556d07d386db7c285e1299a61dfc27b9e32588b4dea081e925a9cfec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a91ee4e79cd641d97e2def52ca9a6865609a491959e6a8329abe084355b9ca91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:55:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:55:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a91ee4e79cd641d97e2def52ca9a6865609a491959e6a8329abe084355b9ca91"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a91ee4e79cd641d97e2def52ca9a6865609a491959e6a8329abe084355b9ca91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"014bd724b8587fc22fbf6521e5825080aea1b41d0a58dcee40923e86d1b124d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:55:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:55:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b59d5d2556d07d386db7c285e1299a61dfc27b9e32588b4dea081e925a9cfec"}
{"level":"info","ts":"2026-07-09T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"014bd724b8587fc22fbf6521e5825080aea1b41d0a58dcee40923e86d1b124d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b59d5d2556d07d386db7c285e1299a61dfc27b9e32588b4dea081e925a9cfec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a91ee4e79cd641d97e2def52ca9a6865609a491959e6a8329abe084355b9ca91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"014bd724b8587fc22fbf6521e5825080aea1b41d0a58dcee40923e86d1b124d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:55:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:55:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/014bd724b8587fc22fbf6521e5825080aea1b41d0a58dcee40923e86d1b124d7"}
{"level":"info","ts":"2026-07-09T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"014bd724b8587fc22fbf6521e5825080aea1b41d0a58dcee40923e86d1b124d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"014bd724b8587fc22fbf6521e5825080aea1b41d0a58dcee40923e86d1b124d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:55:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:55:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["014bd724b8587fc22fbf6521e5825080aea1b41d0a58dcee40923e86d1b124d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-09T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"014bd724b8587fc22fbf6521e5825080aea1b41d0a58dcee40923e86d1b124d7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"014bd724b8587fc22fbf6521e5825080aea1b41d0a58dcee40923e86d1b124d7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"014bd724b8587fc22fbf6521e5825080aea1b41d0a58dcee40923e86d1b124d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:55:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:55:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["014bd724b8587fc22fbf6521e5825080aea1b41d0a58dcee40923e86d1b124d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a91ee4e79cd641d97e2def52ca9a6865609a491959e6a8329abe084355b9ca91"}
{"level":"info","ts":"2026-07-09T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"014bd724b8587fc22fbf6521e5825080aea1b41d0a58dcee40923e86d1b124d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"014bd724b8587fc22fbf6521e5825080aea1b41d0a58dcee40923e86d1b124d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:55:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:55:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["014bd724b8587fc22fbf6521e5825080aea1b41d0a58dcee40923e86d1b124d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b59d5d2556d07d386db7c285e1299a61dfc27b9e32588b4dea081e925a9cfec"}
{"level":"error","ts":"2026-07-09T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"014bd724b8587fc22fbf6521e5825080aea1b41d0a58dcee40923e86d1b124d7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"014bd724b8587fc22fbf6521e5825080aea1b41d0a58dcee40923e86d1b124d7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"014bd724b8587fc22fbf6521e5825080aea1b41d0a58dcee40923e86d1b124d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:55:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:55:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/014bd724b8587fc22fbf6521e5825080aea1b41d0a58dcee40923e86d1b124d7"}
{"level":"info","ts":"2026-07-09T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"014bd724b8587fc22fbf6521e5825080aea1b41d0a58dcee40923e86d1b124d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"014bd724b8587fc22fbf6521e5825080aea1b41d0a58dcee40923e86d1b124d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"014bd724b8587fc22fbf6521e5825080aea1b41d0a58dcee40923e86d1b124d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"014bd724b8587fc22fbf6521e5825080aea1b41d0a58dcee40923e86d1b124d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"014bd724b8587fc22fbf6521e5825080aea1b41d0a58dcee40923e86d1b124d7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/014bd724b8587fc22fbf6521e5825080aea1b41d0a58dcee40923e86d1b124d7"}
{"level":"debug","ts":"2026-07-09T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"014bd724b8587fc22fbf6521e5825080aea1b41d0a58dcee40923e86d1b124d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:55:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:55:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["014bd724b8587fc22fbf6521e5825080aea1b41d0a58dcee40923e86d1b124d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"014bd724b8587fc22fbf6521e5825080aea1b41d0a58dcee40923e86d1b124d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"014bd724b8587fc22fbf6521e5825080aea1b41d0a58dcee40923e86d1b124d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:55:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:55:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/014bd724b8587fc22fbf6521e5825080aea1b41d0a58dcee40923e86d1b124d7"}
{"level":"info","ts":"2026-07-09T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"014bd724b8587fc22fbf6521e5825080aea1b41d0a58dcee40923e86d1b124d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"014bd724b8587fc22fbf6521e5825080aea1b41d0a58dcee40923e86d1b124d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:55:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:55:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["014bd724b8587fc22fbf6521e5825080aea1b41d0a58dcee40923e86d1b124d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/014bd724b8587fc22fbf6521e5825080aea1b41d0a58dcee40923e86d1b124d7"}
{"level":"info","ts":"2026-07-09T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"014bd724b8587fc22fbf6521e5825080aea1b41d0a58dcee40923e86d1b124d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"014bd724b8587fc22fbf6521e5825080aea1b41d0a58dcee40923e86d1b124d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:55:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:55:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["014bd724b8587fc22fbf6521e5825080aea1b41d0a58dcee40923e86d1b124d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/014bd724b8587fc22fbf6521e5825080aea1b41d0a58dcee40923e86d1b124d7"}
{"level":"error","ts":"2026-07-09T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"014bd724b8587fc22fbf6521e5825080aea1b41d0a58dcee40923e86d1b124d7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"014bd724b8587fc22fbf6521e5825080aea1b41d0a58dcee40923e86d1b124d7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"014bd724b8587fc22fbf6521e5825080aea1b41d0a58dcee40923e86d1b124d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"014bd724b8587fc22fbf6521e5825080aea1b41d0a58dcee40923e86d1b124d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70310f404112f3a9e2cdb614f3592e8c65292837bf6f4bf442536b94eab87919","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:55:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70310f404112f3a9e2cdb614f3592e8c65292837bf6f4bf442536b94eab87919"}
{"level":"debug","ts":"2026-07-09T16:55:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10b7ae3c3d47247c959ee62d1b6f9aa0f841e0165d2f918227b4327ec5b1a3d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:55:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:55:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:55:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10b7ae3c3d47247c959ee62d1b6f9aa0f841e0165d2f918227b4327ec5b1a3d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"10b7ae3c3d47247c959ee62d1b6f9aa0f841e0165d2f918227b4327ec5b1a3d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"10b7ae3c3d47247c959ee62d1b6f9aa0f841e0165d2f918227b4327ec5b1a3d6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:55:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10b7ae3c3d47247c959ee62d1b6f9aa0f841e0165d2f918227b4327ec5b1a3d6"}
{"level":"debug","ts":"2026-07-09T16:55:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"10b7ae3c3d47247c959ee62d1b6f9aa0f841e0165d2f918227b4327ec5b1a3d6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:55:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10b7ae3c3d47247c959ee62d1b6f9aa0f841e0165d2f918227b4327ec5b1a3d6"}
{"level":"debug","ts":"2026-07-09T16:55:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10b7ae3c3d47247c959ee62d1b6f9aa0f841e0165d2f918227b4327ec5b1a3d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:55:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:55:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["10b7ae3c3d47247c959ee62d1b6f9aa0f841e0165d2f918227b4327ec5b1a3d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:55:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10b7ae3c3d47247c959ee62d1b6f9aa0f841e0165d2f918227b4327ec5b1a3d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"10b7ae3c3d47247c959ee62d1b6f9aa0f841e0165d2f918227b4327ec5b1a3d6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:55:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10b7ae3c3d47247c959ee62d1b6f9aa0f841e0165d2f918227b4327ec5b1a3d6"}
{"level":"debug","ts":"2026-07-09T16:55:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c17f75bd00e256368d3f83b26dbbd4067fb2c822425cb7bca8cf519e4a45b3c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:55:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c17f75bd00e256368d3f83b26dbbd4067fb2c822425cb7bca8cf519e4a45b3c7"}
{"level":"debug","ts":"2026-07-09T16:55:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"334979cfe3d72917cf050080a8372b551ace6f3d153eb80a945b1e8e57c59963","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:55:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:55:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:55:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"334979cfe3d72917cf050080a8372b551ace6f3d153eb80a945b1e8e57c59963","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"334979cfe3d72917cf050080a8372b551ace6f3d153eb80a945b1e8e57c59963","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"334979cfe3d72917cf050080a8372b551ace6f3d153eb80a945b1e8e57c59963","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:55:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/334979cfe3d72917cf050080a8372b551ace6f3d153eb80a945b1e8e57c59963"}
{"level":"debug","ts":"2026-07-09T16:55:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"334979cfe3d72917cf050080a8372b551ace6f3d153eb80a945b1e8e57c59963","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:55:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/334979cfe3d72917cf050080a8372b551ace6f3d153eb80a945b1e8e57c59963"}
{"level":"debug","ts":"2026-07-09T16:55:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"334979cfe3d72917cf050080a8372b551ace6f3d153eb80a945b1e8e57c59963","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:55:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:55:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["334979cfe3d72917cf050080a8372b551ace6f3d153eb80a945b1e8e57c59963"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:55:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"334979cfe3d72917cf050080a8372b551ace6f3d153eb80a945b1e8e57c59963","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"334979cfe3d72917cf050080a8372b551ace6f3d153eb80a945b1e8e57c59963","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:55:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:55:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:55:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"334979cfe3d72917cf050080a8372b551ace6f3d153eb80a945b1e8e57c59963","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"334979cfe3d72917cf050080a8372b551ace6f3d153eb80a945b1e8e57c59963","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"334979cfe3d72917cf050080a8372b551ace6f3d153eb80a945b1e8e57c59963","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:55:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/334979cfe3d72917cf050080a8372b551ace6f3d153eb80a945b1e8e57c59963"}
{"level":"debug","ts":"2026-07-09T16:55:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"334979cfe3d72917cf050080a8372b551ace6f3d153eb80a945b1e8e57c59963","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:55:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/334979cfe3d72917cf050080a8372b551ace6f3d153eb80a945b1e8e57c59963"}
{"level":"debug","ts":"2026-07-09T16:55:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"334979cfe3d72917cf050080a8372b551ace6f3d153eb80a945b1e8e57c59963","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:55:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:55:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["334979cfe3d72917cf050080a8372b551ace6f3d153eb80a945b1e8e57c59963"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:55:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"334979cfe3d72917cf050080a8372b551ace6f3d153eb80a945b1e8e57c59963","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"334979cfe3d72917cf050080a8372b551ace6f3d153eb80a945b1e8e57c59963","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"043e9366356ee2d3bfa31befc24aaace076873feb55824d159f960993e657d29","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:55:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/334979cfe3d72917cf050080a8372b551ace6f3d153eb80a945b1e8e57c59963"}
{"level":"info","ts":"2026-07-09T16:55:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/043e9366356ee2d3bfa31befc24aaace076873feb55824d159f960993e657d29"}
{"level":"debug","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d31a9df17f866f844504e9fa3b7fae696172b110de807923c9068b89c44457b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:55:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:55:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d31a9df17f866f844504e9fa3b7fae696172b110de807923c9068b89c44457b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d31a9df17f866f844504e9fa3b7fae696172b110de807923c9068b89c44457b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3942ecbd320f580709360526396dbff8a176e2a62d6c1e598d97bf7e6478feef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d31a9df17f866f844504e9fa3b7fae696172b110de807923c9068b89c44457b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d31a9df17f866f844504e9fa3b7fae696172b110de807923c9068b89c44457b"}
{"level":"debug","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d31a9df17f866f844504e9fa3b7fae696172b110de807923c9068b89c44457b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:55:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:55:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d31a9df17f866f844504e9fa3b7fae696172b110de807923c9068b89c44457b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3942ecbd320f580709360526396dbff8a176e2a62d6c1e598d97bf7e6478feef"}
{"level":"info","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d31a9df17f866f844504e9fa3b7fae696172b110de807923c9068b89c44457b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d31a9df17f866f844504e9fa3b7fae696172b110de807923c9068b89c44457b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:55:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:55:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d31a9df17f866f844504e9fa3b7fae696172b110de807923c9068b89c44457b"}
{"level":"info","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d31a9df17f866f844504e9fa3b7fae696172b110de807923c9068b89c44457b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d31a9df17f866f844504e9fa3b7fae696172b110de807923c9068b89c44457b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d31a9df17f866f844504e9fa3b7fae696172b110de807923c9068b89c44457b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d31a9df17f866f844504e9fa3b7fae696172b110de807923c9068b89c44457b"}
{"level":"debug","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d31a9df17f866f844504e9fa3b7fae696172b110de807923c9068b89c44457b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1c5b936252b577f498c93fac77f8fd8e13cd9b1b72e8e28f529af065382b8f1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d31a9df17f866f844504e9fa3b7fae696172b110de807923c9068b89c44457b"}
{"level":"info","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1c5b936252b577f498c93fac77f8fd8e13cd9b1b72e8e28f529af065382b8f1"}
{"level":"debug","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d31a9df17f866f844504e9fa3b7fae696172b110de807923c9068b89c44457b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:55:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:55:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d31a9df17f866f844504e9fa3b7fae696172b110de807923c9068b89c44457b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d31a9df17f866f844504e9fa3b7fae696172b110de807923c9068b89c44457b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d31a9df17f866f844504e9fa3b7fae696172b110de807923c9068b89c44457b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:55:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:55:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d31a9df17f866f844504e9fa3b7fae696172b110de807923c9068b89c44457b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d31a9df17f866f844504e9fa3b7fae696172b110de807923c9068b89c44457b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d31a9df17f866f844504e9fa3b7fae696172b110de807923c9068b89c44457b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d31a9df17f866f844504e9fa3b7fae696172b110de807923c9068b89c44457b"}
{"level":"debug","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d31a9df17f866f844504e9fa3b7fae696172b110de807923c9068b89c44457b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d31a9df17f866f844504e9fa3b7fae696172b110de807923c9068b89c44457b"}
{"level":"debug","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d353bf32b5aefddcfe41db7674600aa0dbd623c20cc743fb6e06725a75e5f00","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d353bf32b5aefddcfe41db7674600aa0dbd623c20cc743fb6e06725a75e5f00"}
{"level":"debug","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d31a9df17f866f844504e9fa3b7fae696172b110de807923c9068b89c44457b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:55:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:55:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d31a9df17f866f844504e9fa3b7fae696172b110de807923c9068b89c44457b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d31a9df17f866f844504e9fa3b7fae696172b110de807923c9068b89c44457b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d31a9df17f866f844504e9fa3b7fae696172b110de807923c9068b89c44457b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:55:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:55:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d31a9df17f866f844504e9fa3b7fae696172b110de807923c9068b89c44457b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d31a9df17f866f844504e9fa3b7fae696172b110de807923c9068b89c44457b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d31a9df17f866f844504e9fa3b7fae696172b110de807923c9068b89c44457b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d31a9df17f866f844504e9fa3b7fae696172b110de807923c9068b89c44457b"}
{"level":"debug","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d31a9df17f866f844504e9fa3b7fae696172b110de807923c9068b89c44457b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d31a9df17f866f844504e9fa3b7fae696172b110de807923c9068b89c44457b"}
{"level":"debug","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b59d5d2556d07d386db7c285e1299a61dfc27b9e32588b4dea081e925a9cfec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:55:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:55:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b59d5d2556d07d386db7c285e1299a61dfc27b9e32588b4dea081e925a9cfec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b59d5d2556d07d386db7c285e1299a61dfc27b9e32588b4dea081e925a9cfec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b59d5d2556d07d386db7c285e1299a61dfc27b9e32588b4dea081e925a9cfec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b59d5d2556d07d386db7c285e1299a61dfc27b9e32588b4dea081e925a9cfec"}
{"level":"debug","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d31a9df17f866f844504e9fa3b7fae696172b110de807923c9068b89c44457b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:55:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:55:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d31a9df17f866f844504e9fa3b7fae696172b110de807923c9068b89c44457b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d31a9df17f866f844504e9fa3b7fae696172b110de807923c9068b89c44457b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b59d5d2556d07d386db7c285e1299a61dfc27b9e32588b4dea081e925a9cfec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d31a9df17f866f844504e9fa3b7fae696172b110de807923c9068b89c44457b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b59d5d2556d07d386db7c285e1299a61dfc27b9e32588b4dea081e925a9cfec"}
{"level":"info","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d31a9df17f866f844504e9fa3b7fae696172b110de807923c9068b89c44457b"}
{"level":"debug","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b59d5d2556d07d386db7c285e1299a61dfc27b9e32588b4dea081e925a9cfec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:55:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:55:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b59d5d2556d07d386db7c285e1299a61dfc27b9e32588b4dea081e925a9cfec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b59d5d2556d07d386db7c285e1299a61dfc27b9e32588b4dea081e925a9cfec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bf4866826450c6e5e75e27e6ee08dd340f68d74847a0d0e3c322a8fdc473355","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:55:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:55:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6bf4866826450c6e5e75e27e6ee08dd340f68d74847a0d0e3c322a8fdc473355","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b59d5d2556d07d386db7c285e1299a61dfc27b9e32588b4dea081e925a9cfec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acf4178859bca305c71d5e4e6485cac3530cd08cd789e0fbc278389d8d937ca1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bf4866826450c6e5e75e27e6ee08dd340f68d74847a0d0e3c322a8fdc473355","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bf4866826450c6e5e75e27e6ee08dd340f68d74847a0d0e3c322a8fdc473355","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bf4866826450c6e5e75e27e6ee08dd340f68d74847a0d0e3c322a8fdc473355","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bf4866826450c6e5e75e27e6ee08dd340f68d74847a0d0e3c322a8fdc473355"}
{"level":"info","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b59d5d2556d07d386db7c285e1299a61dfc27b9e32588b4dea081e925a9cfec"}
{"level":"debug","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bf4866826450c6e5e75e27e6ee08dd340f68d74847a0d0e3c322a8fdc473355","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:55:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:55:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6bf4866826450c6e5e75e27e6ee08dd340f68d74847a0d0e3c322a8fdc473355"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acf4178859bca305c71d5e4e6485cac3530cd08cd789e0fbc278389d8d937ca1"}
{"level":"info","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6bf4866826450c6e5e75e27e6ee08dd340f68d74847a0d0e3c322a8fdc473355","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"890c9d6664452a452c0756e89853341160395adc735eb026ba86e5c5c63f005e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bf4866826450c6e5e75e27e6ee08dd340f68d74847a0d0e3c322a8fdc473355","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T16:55:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T16:55:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6bf4866826450c6e5e75e27e6ee08dd340f68d74847a0d0e3c322a8fdc473355","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71388d8adfefe7c1103db4d6aa7b37eac01057f9b68d00215057073493832e8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bf4866826450c6e5e75e27e6ee08dd340f68d74847a0d0e3c322a8fdc473355","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bf4866826450c6e5e75e27e6ee08dd340f68d74847a0d0e3c322a8fdc473355"}
{"level":"debug","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bf4866826450c6e5e75e27e6ee08dd340f68d74847a0d0e3c322a8fdc473355","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T16:55:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T16:55:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6bf4866826450c6e5e75e27e6ee08dd340f68d74847a0d0e3c322a8fdc473355"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6bf4866826450c6e5e75e27e6ee08dd340f68d74847a0d0e3c322a8fdc473355","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"014bd724b8587fc22fbf6521e5825080aea1b41d0a58dcee40923e86d1b124d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bf4866826450c6e5e75e27e6ee08dd340f68d74847a0d0e3c322a8fdc473355","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/890c9d6664452a452c0756e89853341160395adc735eb026ba86e5c5c63f005e"}
{"level":"debug","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ddd7728a30af0ce5c1ed50f9cbdd8b44aeacdd369ed5215481967d231ee4dd6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71388d8adfefe7c1103db4d6aa7b37eac01057f9b68d00215057073493832e8e"}
{"level":"info","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bf4866826450c6e5e75e27e6ee08dd340f68d74847a0d0e3c322a8fdc473355"}
{"level":"debug","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8644d86cafc4cd9af16b9ec4f0241fa5e539ed4326bec578db0ebbfee884aff7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/014bd724b8587fc22fbf6521e5825080aea1b41d0a58dcee40923e86d1b124d7"}
{"level":"debug","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5340ab49c7e0047dd31bd618e2c9a5708884b292d1aa7696a001df90bd2e99ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ddd7728a30af0ce5c1ed50f9cbdd8b44aeacdd369ed5215481967d231ee4dd6"}
{"level":"debug","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2760ae0a4925f92dd3a44348ee789fe74d2ad983418447edeeec31e5e967debd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27b1846bbb07e61ad528f27deaaba0d1bfd5e3ab3f8f1596ddef97ddc1ead7b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8644d86cafc4cd9af16b9ec4f0241fa5e539ed4326bec578db0ebbfee884aff7"}
{"level":"debug","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2a2059953cd614c36aed4a45db6d306c50fb31034655b0c99db042cc065aa1d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5340ab49c7e0047dd31bd618e2c9a5708884b292d1aa7696a001df90bd2e99ce"}
{"level":"info","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2760ae0a4925f92dd3a44348ee789fe74d2ad983418447edeeec31e5e967debd"}
{"level":"debug","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b52c0e0f68686dcfb5ba58e26bd5d52f59bf7d638d42db746c77324e32a446ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a91ee4e79cd641d97e2def52ca9a6865609a491959e6a8329abe084355b9ca91","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27b1846bbb07e61ad528f27deaaba0d1bfd5e3ab3f8f1596ddef97ddc1ead7b5"}
{"level":"debug","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28be827e9e465483c1a86ba02840129ea887a29aa8440b8406050c6a04e723a5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2a2059953cd614c36aed4a45db6d306c50fb31034655b0c99db042cc065aa1d"}
{"level":"info","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b52c0e0f68686dcfb5ba58e26bd5d52f59bf7d638d42db746c77324e32a446ad"}
{"level":"info","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a91ee4e79cd641d97e2def52ca9a6865609a491959e6a8329abe084355b9ca91"}
{"level":"info","ts":"2026-07-09T16:55:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28be827e9e465483c1a86ba02840129ea887a29aa8440b8406050c6a04e723a5"}
{"level":"info","ts":"2026-07-09T16:55:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"54135746-91d7-478d-bf9f-3249eb8b1c85","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:60830","PortSpecifier":{"PortValue":60830}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"54135746-91d7-478d-bf9f-3249eb8b1c85","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-bef56b.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T16:55:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"54135746-91d7-478d-bf9f-3249eb8b1c85","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:60830","PortSpecifier":{"PortValue":60830}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783616127,"nanos":110676490},"http":{"id":"54135746-91d7-478d-bf9f-3249eb8b1c85","method":"POST","headers":{":authority":"e2e-shared-a-bef56b.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T16:55:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"54135746-91d7-478d-bf9f-3249eb8b1c85","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T16:55:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"54135746-91d7-478d-bf9f-3249eb8b1c85","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"045eab5d-f4e5-44ab-afa6-3765d3a1e600","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fbe0c265-c7ed-4a1c-9972-77fe8f7b4ecb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8c696e1ec923"]}}
{"level":"debug","ts":"2026-07-09T16:55:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"54135746-91d7-478d-bf9f-3249eb8b1c85","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8c696e1ec923"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fbe0c265-c7ed-4a1c-9972-77fe8f7b4ecb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"045eab5d-f4e5-44ab-afa6-3765d3a1e600","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"043e9366356ee2d3bfa31befc24aaace076873feb55824d159f960993e657d29"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bef56b.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T16:55:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54135746-91d7-478d-bf9f-3249eb8b1c85","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:55:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54135746-91d7-478d-bf9f-3249eb8b1c85","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:55:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54135746-91d7-478d-bf9f-3249eb8b1c85","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bef56b/rate-test-model-bef56b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:55:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"54135746-91d7-478d-bf9f-3249eb8b1c85","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T16:55:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"54135746-91d7-478d-bf9f-3249eb8b1c85","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T16:55:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"54135746-91d7-478d-bf9f-3249eb8b1c85","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T16:55:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"54135746-91d7-478d-bf9f-3249eb8b1c85","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T16:55:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"54135746-91d7-478d-bf9f-3249eb8b1c85","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T16:55:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f50055b8-d49d-4e8e-abd5-3ee113e6f24e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:50806","PortSpecifier":{"PortValue":50806}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f50055b8-d49d-4e8e-abd5-3ee113e6f24e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-6bf011.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T16:55:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f50055b8-d49d-4e8e-abd5-3ee113e6f24e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:50806","PortSpecifier":{"PortValue":50806}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783616127,"nanos":154436727},"http":{"id":"f50055b8-d49d-4e8e-abd5-3ee113e6f24e","method":"POST","headers":{":authority":"e2e-shared-b-6bf011.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T16:55:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f50055b8-d49d-4e8e-abd5-3ee113e6f24e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T16:55:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f50055b8-d49d-4e8e-abd5-3ee113e6f24e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"045eab5d-f4e5-44ab-afa6-3765d3a1e600","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fbe0c265-c7ed-4a1c-9972-77fe8f7b4ecb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8c696e1ec923"]}}
{"level":"debug","ts":"2026-07-09T16:55:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f50055b8-d49d-4e8e-abd5-3ee113e6f24e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8c696e1ec923"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fbe0c265-c7ed-4a1c-9972-77fe8f7b4ecb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"045eab5d-f4e5-44ab-afa6-3765d3a1e600","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"28be827e9e465483c1a86ba02840129ea887a29aa8440b8406050c6a04e723a5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6bf011.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T16:55:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f50055b8-d49d-4e8e-abd5-3ee113e6f24e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:55:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f50055b8-d49d-4e8e-abd5-3ee113e6f24e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:55:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f50055b8-d49d-4e8e-abd5-3ee113e6f24e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6bf011/rate-test-model-6bf011\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:55:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f50055b8-d49d-4e8e-abd5-3ee113e6f24e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T16:55:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f50055b8-d49d-4e8e-abd5-3ee113e6f24e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T16:55:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f50055b8-d49d-4e8e-abd5-3ee113e6f24e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-09T16:55:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f50055b8-d49d-4e8e-abd5-3ee113e6f24e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T16:55:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f50055b8-d49d-4e8e-abd5-3ee113e6f24e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T16:55:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"efac617d-d0ed-4e8e-ac75-e5e981bf78bb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:60832","PortSpecifier":{"PortValue":60832}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"efac617d-d0ed-4e8e-ac75-e5e981bf78bb","method":"POST","path":"/ai-tenant-e2e-shared-a-bef56b/rate-test-model-bef56b/v1/completions","host":"e2e-shared-a-bef56b.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T16:55:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"efac617d-d0ed-4e8e-ac75-e5e981bf78bb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:60832","PortSpecifier":{"PortValue":60832}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783616127,"nanos":198622044},"http":{"id":"efac617d-d0ed-4e8e-ac75-e5e981bf78bb","method":"POST","headers":{":authority":"e2e-shared-a-bef56b.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-bef56b/rate-test-model-bef56b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T16:55:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"efac617d-d0ed-4e8e-ac75-e5e981bf78bb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-16FJseOgjkIuwQfjM_pYmELdkCjPYEvMSUKXKZUtnrniRMU1iGVlTL0DfykVY"}
{"level":"debug","ts":"2026-07-09T16:55:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"efac617d-d0ed-4e8e-ac75-e5e981bf78bb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bef56b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-16FJseOgjkIuwQfjM_pYmELdkCjPYEvMSUKXKZUtnrniRMU1iGVlTL0DfykVY\"}"}
{"level":"debug","ts":"2026-07-09T16:55:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"efac617d-d0ed-4e8e-ac75-e5e981bf78bb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bef56b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4afe88ac-d5f8-49a0-8ef5-1299ca1c4f50","keyName":"e2e-rate-a-d94ef3","subscription":"e2e-rate-iso-a-d94ef3","tenant":"e2e-shared-a-bef56b","userId":"4afe88ac-d5f8-49a0-8ef5-1299ca1c4f50","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T16:55:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"efac617d-d0ed-4e8e-ac75-e5e981bf78bb","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-bef56b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-bef56b/rate-test-model-bef56b\",\"requestedSubscription\":\"e2e-rate-iso-a-d94ef3\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T16:55:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"efac617d-d0ed-4e8e-ac75-e5e981bf78bb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bef56b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-bef56b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d94ef3","namespace":"ai-tenant-e2e-shared-a-bef56b","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T16:55:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"efac617d-d0ed-4e8e-ac75-e5e981bf78bb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T16:55:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"efac617d-d0ed-4e8e-ac75-e5e981bf78bb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:55:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"efac617d-d0ed-4e8e-ac75-e5e981bf78bb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:55:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"efac617d-d0ed-4e8e-ac75-e5e981bf78bb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:55:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"efac617d-d0ed-4e8e-ac75-e5e981bf78bb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bef56b/rate-test-model-bef56b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:55:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"efac617d-d0ed-4e8e-ac75-e5e981bf78bb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T16:55:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"efac617d-d0ed-4e8e-ac75-e5e981bf78bb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d94ef3"}
{"level":"debug","ts":"2026-07-09T16:55:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"efac617d-d0ed-4e8e-ac75-e5e981bf78bb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T16:55:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"efac617d-d0ed-4e8e-ac75-e5e981bf78bb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4afe88ac-d5f8-49a0-8ef5-1299ca1c4f50","keyName":"e2e-rate-a-d94ef3","selected_subscription":"e2e-rate-iso-a-d94ef3","selected_subscription_key":"ai-tenant-e2e-shared-a-bef56b/e2e-rate-iso-a-d94ef3@ai-tenant-e2e-shared-a-bef56b/rate-test-model-bef56b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-bef56b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d94ef3","namespace":"ai-tenant-e2e-shared-a-bef56b","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T16:55:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"efac617d-d0ed-4e8e-ac75-e5e981bf78bb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T16:55:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"efac617d-d0ed-4e8e-ac75-e5e981bf78bb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T16:55:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bdcfc2f5-2980-4cee-ab3d-8847e35d674f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:60844","PortSpecifier":{"PortValue":60844}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bdcfc2f5-2980-4cee-ab3d-8847e35d674f","method":"POST","path":"/ai-tenant-e2e-shared-a-bef56b/rate-test-model-bef56b/v1/completions","host":"e2e-shared-a-bef56b.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T16:55:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bdcfc2f5-2980-4cee-ab3d-8847e35d674f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:60844","PortSpecifier":{"PortValue":60844}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783616128,"nanos":264325435},"http":{"id":"bdcfc2f5-2980-4cee-ab3d-8847e35d674f","method":"POST","headers":{":authority":"e2e-shared-a-bef56b.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-bef56b/rate-test-model-bef56b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T16:55:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bdcfc2f5-2980-4cee-ab3d-8847e35d674f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-16FJseOgjkIuwQfjM_pYmELdkCjPYEvMSUKXKZUtnrniRMU1iGVlTL0DfykVY"}
{"level":"debug","ts":"2026-07-09T16:55:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bdcfc2f5-2980-4cee-ab3d-8847e35d674f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bef56b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-16FJseOgjkIuwQfjM_pYmELdkCjPYEvMSUKXKZUtnrniRMU1iGVlTL0DfykVY\"}"}
{"level":"debug","ts":"2026-07-09T16:55:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bdcfc2f5-2980-4cee-ab3d-8847e35d674f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bef56b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4afe88ac-d5f8-49a0-8ef5-1299ca1c4f50","keyName":"e2e-rate-a-d94ef3","subscription":"e2e-rate-iso-a-d94ef3","tenant":"e2e-shared-a-bef56b","userId":"4afe88ac-d5f8-49a0-8ef5-1299ca1c4f50","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T16:55:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bdcfc2f5-2980-4cee-ab3d-8847e35d674f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-bef56b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-bef56b/rate-test-model-bef56b\",\"requestedSubscription\":\"e2e-rate-iso-a-d94ef3\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T16:55:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bdcfc2f5-2980-4cee-ab3d-8847e35d674f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bef56b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-bef56b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d94ef3","namespace":"ai-tenant-e2e-shared-a-bef56b","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T16:55:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bdcfc2f5-2980-4cee-ab3d-8847e35d674f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T16:55:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bdcfc2f5-2980-4cee-ab3d-8847e35d674f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:55:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bdcfc2f5-2980-4cee-ab3d-8847e35d674f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:55:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bdcfc2f5-2980-4cee-ab3d-8847e35d674f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:55:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bdcfc2f5-2980-4cee-ab3d-8847e35d674f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bef56b/rate-test-model-bef56b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:55:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bdcfc2f5-2980-4cee-ab3d-8847e35d674f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T16:55:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bdcfc2f5-2980-4cee-ab3d-8847e35d674f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d94ef3"}
{"level":"debug","ts":"2026-07-09T16:55:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bdcfc2f5-2980-4cee-ab3d-8847e35d674f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T16:55:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bdcfc2f5-2980-4cee-ab3d-8847e35d674f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4afe88ac-d5f8-49a0-8ef5-1299ca1c4f50","keyName":"e2e-rate-a-d94ef3","selected_subscription":"e2e-rate-iso-a-d94ef3","selected_subscription_key":"ai-tenant-e2e-shared-a-bef56b/e2e-rate-iso-a-d94ef3@ai-tenant-e2e-shared-a-bef56b/rate-test-model-bef56b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-bef56b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d94ef3","namespace":"ai-tenant-e2e-shared-a-bef56b","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T16:55:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bdcfc2f5-2980-4cee-ab3d-8847e35d674f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T16:55:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bdcfc2f5-2980-4cee-ab3d-8847e35d674f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T16:55:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4b349f3b-1d78-4f09-b24c-f11ed7c9d30c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:60852","PortSpecifier":{"PortValue":60852}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4b349f3b-1d78-4f09-b24c-f11ed7c9d30c","method":"POST","path":"/ai-tenant-e2e-shared-a-bef56b/rate-test-model-bef56b/v1/completions","host":"e2e-shared-a-bef56b.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T16:55:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4b349f3b-1d78-4f09-b24c-f11ed7c9d30c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:60852","PortSpecifier":{"PortValue":60852}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783616129,"nanos":305844758},"http":{"id":"4b349f3b-1d78-4f09-b24c-f11ed7c9d30c","method":"POST","headers":{":authority":"e2e-shared-a-bef56b.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-bef56b/rate-test-model-bef56b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T16:55:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4b349f3b-1d78-4f09-b24c-f11ed7c9d30c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-16FJseOgjkIuwQfjM_pYmELdkCjPYEvMSUKXKZUtnrniRMU1iGVlTL0DfykVY"}
{"level":"debug","ts":"2026-07-09T16:55:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4b349f3b-1d78-4f09-b24c-f11ed7c9d30c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bef56b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-16FJseOgjkIuwQfjM_pYmELdkCjPYEvMSUKXKZUtnrniRMU1iGVlTL0DfykVY\"}"}
{"level":"debug","ts":"2026-07-09T16:55:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4b349f3b-1d78-4f09-b24c-f11ed7c9d30c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bef56b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4afe88ac-d5f8-49a0-8ef5-1299ca1c4f50","keyName":"e2e-rate-a-d94ef3","subscription":"e2e-rate-iso-a-d94ef3","tenant":"e2e-shared-a-bef56b","userId":"4afe88ac-d5f8-49a0-8ef5-1299ca1c4f50","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T16:55:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4b349f3b-1d78-4f09-b24c-f11ed7c9d30c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-bef56b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-bef56b/rate-test-model-bef56b\",\"requestedSubscription\":\"e2e-rate-iso-a-d94ef3\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T16:55:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4b349f3b-1d78-4f09-b24c-f11ed7c9d30c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bef56b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-bef56b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d94ef3","namespace":"ai-tenant-e2e-shared-a-bef56b","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T16:55:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4b349f3b-1d78-4f09-b24c-f11ed7c9d30c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T16:55:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b349f3b-1d78-4f09-b24c-f11ed7c9d30c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:55:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b349f3b-1d78-4f09-b24c-f11ed7c9d30c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:55:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b349f3b-1d78-4f09-b24c-f11ed7c9d30c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:55:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b349f3b-1d78-4f09-b24c-f11ed7c9d30c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bef56b/rate-test-model-bef56b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:55:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4b349f3b-1d78-4f09-b24c-f11ed7c9d30c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T16:55:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4b349f3b-1d78-4f09-b24c-f11ed7c9d30c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d94ef3"}
{"level":"debug","ts":"2026-07-09T16:55:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4b349f3b-1d78-4f09-b24c-f11ed7c9d30c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T16:55:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4b349f3b-1d78-4f09-b24c-f11ed7c9d30c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4afe88ac-d5f8-49a0-8ef5-1299ca1c4f50","keyName":"e2e-rate-a-d94ef3","selected_subscription":"e2e-rate-iso-a-d94ef3","selected_subscription_key":"ai-tenant-e2e-shared-a-bef56b/e2e-rate-iso-a-d94ef3@ai-tenant-e2e-shared-a-bef56b/rate-test-model-bef56b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-bef56b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d94ef3","namespace":"ai-tenant-e2e-shared-a-bef56b","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T16:55:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4b349f3b-1d78-4f09-b24c-f11ed7c9d30c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T16:55:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4b349f3b-1d78-4f09-b24c-f11ed7c9d30c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T16:55:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"58528027-5799-4f1d-9b6f-357d66d5dbf8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:47364","PortSpecifier":{"PortValue":47364}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"58528027-5799-4f1d-9b6f-357d66d5dbf8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-bef56b.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T16:55:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"58528027-5799-4f1d-9b6f-357d66d5dbf8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:47364","PortSpecifier":{"PortValue":47364}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783616142,"nanos":215047136},"http":{"id":"58528027-5799-4f1d-9b6f-357d66d5dbf8","method":"POST","headers":{":authority":"e2e-shared-a-bef56b.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T16:55:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"58528027-5799-4f1d-9b6f-357d66d5dbf8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T16:55:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"58528027-5799-4f1d-9b6f-357d66d5dbf8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"045eab5d-f4e5-44ab-afa6-3765d3a1e600","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fbe0c265-c7ed-4a1c-9972-77fe8f7b4ecb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8c696e1ec923"]}}
{"level":"debug","ts":"2026-07-09T16:55:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"58528027-5799-4f1d-9b6f-357d66d5dbf8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8c696e1ec923"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fbe0c265-c7ed-4a1c-9972-77fe8f7b4ecb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"045eab5d-f4e5-44ab-afa6-3765d3a1e600","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"043e9366356ee2d3bfa31befc24aaace076873feb55824d159f960993e657d29"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bef56b.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T16:55:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58528027-5799-4f1d-9b6f-357d66d5dbf8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:55:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58528027-5799-4f1d-9b6f-357d66d5dbf8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:55:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58528027-5799-4f1d-9b6f-357d66d5dbf8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bef56b/rate-test-model-bef56b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:55:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"58528027-5799-4f1d-9b6f-357d66d5dbf8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T16:55:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58528027-5799-4f1d-9b6f-357d66d5dbf8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T16:55:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58528027-5799-4f1d-9b6f-357d66d5dbf8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T16:55:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"58528027-5799-4f1d-9b6f-357d66d5dbf8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T16:55:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"58528027-5799-4f1d-9b6f-357d66d5dbf8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T16:55:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"474192d2-5f53-48a7-9cd1-c8c5dc5794ac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:38614","PortSpecifier":{"PortValue":38614}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"474192d2-5f53-48a7-9cd1-c8c5dc5794ac","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-6bf011.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T16:55:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"474192d2-5f53-48a7-9cd1-c8c5dc5794ac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:38614","PortSpecifier":{"PortValue":38614}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783616142,"nanos":254467625},"http":{"id":"474192d2-5f53-48a7-9cd1-c8c5dc5794ac","method":"POST","headers":{":authority":"e2e-shared-b-6bf011.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T16:55:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"474192d2-5f53-48a7-9cd1-c8c5dc5794ac","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T16:55:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"474192d2-5f53-48a7-9cd1-c8c5dc5794ac","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"045eab5d-f4e5-44ab-afa6-3765d3a1e600","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fbe0c265-c7ed-4a1c-9972-77fe8f7b4ecb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8c696e1ec923"]}}
{"level":"debug","ts":"2026-07-09T16:55:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"474192d2-5f53-48a7-9cd1-c8c5dc5794ac","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8c696e1ec923"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fbe0c265-c7ed-4a1c-9972-77fe8f7b4ecb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"045eab5d-f4e5-44ab-afa6-3765d3a1e600","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"28be827e9e465483c1a86ba02840129ea887a29aa8440b8406050c6a04e723a5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6bf011.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T16:55:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"474192d2-5f53-48a7-9cd1-c8c5dc5794ac","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:55:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"474192d2-5f53-48a7-9cd1-c8c5dc5794ac","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:55:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"474192d2-5f53-48a7-9cd1-c8c5dc5794ac","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6bf011/rate-test-model-6bf011\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:55:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"474192d2-5f53-48a7-9cd1-c8c5dc5794ac","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T16:55:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"474192d2-5f53-48a7-9cd1-c8c5dc5794ac","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T16:55:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"474192d2-5f53-48a7-9cd1-c8c5dc5794ac","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T16:55:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"474192d2-5f53-48a7-9cd1-c8c5dc5794ac","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T16:55:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"474192d2-5f53-48a7-9cd1-c8c5dc5794ac","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T16:55:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1cd4bac2-b1de-4621-885a-a195db760142","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:47368","PortSpecifier":{"PortValue":47368}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1cd4bac2-b1de-4621-885a-a195db760142","method":"POST","path":"/ai-tenant-e2e-shared-a-bef56b/rate-test-model-bef56b/v1/completions","host":"e2e-shared-a-bef56b.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T16:55:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1cd4bac2-b1de-4621-885a-a195db760142","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:47368","PortSpecifier":{"PortValue":47368}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783616142,"nanos":293945037},"http":{"id":"1cd4bac2-b1de-4621-885a-a195db760142","method":"POST","headers":{":authority":"e2e-shared-a-bef56b.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-bef56b/rate-test-model-bef56b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T16:55:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1cd4bac2-b1de-4621-885a-a195db760142","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-KYdBsIT5fd4yIvgP_Rt8fWqiwhU8yTrgulR0qGH9HYfg43le6VqKT8Bp6ZJV"}
{"level":"debug","ts":"2026-07-09T16:55:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1cd4bac2-b1de-4621-885a-a195db760142","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bef56b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-KYdBsIT5fd4yIvgP_Rt8fWqiwhU8yTrgulR0qGH9HYfg43le6VqKT8Bp6ZJV\"}"}
{"level":"debug","ts":"2026-07-09T16:55:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1cd4bac2-b1de-4621-885a-a195db760142","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bef56b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"98beff11-a1ae-4e17-8e64-cad6eb2a690d","keyName":"e2e-rate-a-908b00","subscription":"e2e-rate-iso-a-908b00","tenant":"e2e-shared-a-bef56b","userId":"98beff11-a1ae-4e17-8e64-cad6eb2a690d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T16:55:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1cd4bac2-b1de-4621-885a-a195db760142","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-bef56b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-bef56b/rate-test-model-bef56b\",\"requestedSubscription\":\"e2e-rate-iso-a-908b00\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T16:55:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1cd4bac2-b1de-4621-885a-a195db760142","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bef56b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-bef56b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-908b00","namespace":"ai-tenant-e2e-shared-a-bef56b","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T16:55:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1cd4bac2-b1de-4621-885a-a195db760142","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T16:55:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1cd4bac2-b1de-4621-885a-a195db760142","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:55:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1cd4bac2-b1de-4621-885a-a195db760142","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:55:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1cd4bac2-b1de-4621-885a-a195db760142","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:55:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1cd4bac2-b1de-4621-885a-a195db760142","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bef56b/rate-test-model-bef56b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:55:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1cd4bac2-b1de-4621-885a-a195db760142","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T16:55:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1cd4bac2-b1de-4621-885a-a195db760142","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-908b00"}
{"level":"debug","ts":"2026-07-09T16:55:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1cd4bac2-b1de-4621-885a-a195db760142","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T16:55:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1cd4bac2-b1de-4621-885a-a195db760142","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"98beff11-a1ae-4e17-8e64-cad6eb2a690d","keyName":"e2e-rate-a-908b00","selected_subscription":"e2e-rate-iso-a-908b00","selected_subscription_key":"ai-tenant-e2e-shared-a-bef56b/e2e-rate-iso-a-908b00@ai-tenant-e2e-shared-a-bef56b/rate-test-model-bef56b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-bef56b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-908b00","namespace":"ai-tenant-e2e-shared-a-bef56b","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T16:55:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1cd4bac2-b1de-4621-885a-a195db760142","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T16:55:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1cd4bac2-b1de-4621-885a-a195db760142","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T16:55:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"80254421-efd8-48cb-82b4-8f58a408230f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:47372","PortSpecifier":{"PortValue":47372}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"80254421-efd8-48cb-82b4-8f58a408230f","method":"POST","path":"/ai-tenant-e2e-shared-a-bef56b/rate-test-model-bef56b/v1/completions","host":"e2e-shared-a-bef56b.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T16:55:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"80254421-efd8-48cb-82b4-8f58a408230f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:47372","PortSpecifier":{"PortValue":47372}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783616143,"nanos":337024829},"http":{"id":"80254421-efd8-48cb-82b4-8f58a408230f","method":"POST","headers":{":authority":"e2e-shared-a-bef56b.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-bef56b/rate-test-model-bef56b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T16:55:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"80254421-efd8-48cb-82b4-8f58a408230f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-KYdBsIT5fd4yIvgP_Rt8fWqiwhU8yTrgulR0qGH9HYfg43le6VqKT8Bp6ZJV"}
{"level":"debug","ts":"2026-07-09T16:55:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"80254421-efd8-48cb-82b4-8f58a408230f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bef56b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-KYdBsIT5fd4yIvgP_Rt8fWqiwhU8yTrgulR0qGH9HYfg43le6VqKT8Bp6ZJV\"}"}
{"level":"debug","ts":"2026-07-09T16:55:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"80254421-efd8-48cb-82b4-8f58a408230f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bef56b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"98beff11-a1ae-4e17-8e64-cad6eb2a690d","keyName":"e2e-rate-a-908b00","subscription":"e2e-rate-iso-a-908b00","tenant":"e2e-shared-a-bef56b","userId":"98beff11-a1ae-4e17-8e64-cad6eb2a690d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T16:55:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"80254421-efd8-48cb-82b4-8f58a408230f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-bef56b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-bef56b/rate-test-model-bef56b\",\"requestedSubscription\":\"e2e-rate-iso-a-908b00\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T16:55:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"80254421-efd8-48cb-82b4-8f58a408230f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bef56b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-bef56b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-908b00","namespace":"ai-tenant-e2e-shared-a-bef56b","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T16:55:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"80254421-efd8-48cb-82b4-8f58a408230f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T16:55:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80254421-efd8-48cb-82b4-8f58a408230f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:55:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80254421-efd8-48cb-82b4-8f58a408230f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:55:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80254421-efd8-48cb-82b4-8f58a408230f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:55:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80254421-efd8-48cb-82b4-8f58a408230f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bef56b/rate-test-model-bef56b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:55:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80254421-efd8-48cb-82b4-8f58a408230f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T16:55:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80254421-efd8-48cb-82b4-8f58a408230f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-908b00"}
{"level":"debug","ts":"2026-07-09T16:55:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80254421-efd8-48cb-82b4-8f58a408230f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T16:55:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80254421-efd8-48cb-82b4-8f58a408230f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"98beff11-a1ae-4e17-8e64-cad6eb2a690d","keyName":"e2e-rate-a-908b00","selected_subscription":"e2e-rate-iso-a-908b00","selected_subscription_key":"ai-tenant-e2e-shared-a-bef56b/e2e-rate-iso-a-908b00@ai-tenant-e2e-shared-a-bef56b/rate-test-model-bef56b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-bef56b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-908b00","namespace":"ai-tenant-e2e-shared-a-bef56b","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T16:55:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"80254421-efd8-48cb-82b4-8f58a408230f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T16:55:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"80254421-efd8-48cb-82b4-8f58a408230f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T16:55:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bcfaa06a-55f2-4462-b986-8704af7aed6a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:44098","PortSpecifier":{"PortValue":44098}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bcfaa06a-55f2-4462-b986-8704af7aed6a","method":"POST","path":"/ai-tenant-e2e-shared-a-bef56b/rate-test-model-bef56b/v1/completions","host":"e2e-shared-a-bef56b.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T16:55:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bcfaa06a-55f2-4462-b986-8704af7aed6a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:44098","PortSpecifier":{"PortValue":44098}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783616144,"nanos":379389461},"http":{"id":"bcfaa06a-55f2-4462-b986-8704af7aed6a","method":"POST","headers":{":authority":"e2e-shared-a-bef56b.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-bef56b/rate-test-model-bef56b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T16:55:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bcfaa06a-55f2-4462-b986-8704af7aed6a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-KYdBsIT5fd4yIvgP_Rt8fWqiwhU8yTrgulR0qGH9HYfg43le6VqKT8Bp6ZJV"}
{"level":"debug","ts":"2026-07-09T16:55:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bcfaa06a-55f2-4462-b986-8704af7aed6a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bef56b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-KYdBsIT5fd4yIvgP_Rt8fWqiwhU8yTrgulR0qGH9HYfg43le6VqKT8Bp6ZJV\"}"}
{"level":"debug","ts":"2026-07-09T16:55:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bcfaa06a-55f2-4462-b986-8704af7aed6a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bef56b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"98beff11-a1ae-4e17-8e64-cad6eb2a690d","keyName":"e2e-rate-a-908b00","subscription":"e2e-rate-iso-a-908b00","tenant":"e2e-shared-a-bef56b","userId":"98beff11-a1ae-4e17-8e64-cad6eb2a690d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T16:55:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bcfaa06a-55f2-4462-b986-8704af7aed6a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-bef56b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-bef56b/rate-test-model-bef56b\",\"requestedSubscription\":\"e2e-rate-iso-a-908b00\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T16:55:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bcfaa06a-55f2-4462-b986-8704af7aed6a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bef56b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-bef56b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-908b00","namespace":"ai-tenant-e2e-shared-a-bef56b","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T16:55:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bcfaa06a-55f2-4462-b986-8704af7aed6a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T16:55:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bcfaa06a-55f2-4462-b986-8704af7aed6a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:55:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bcfaa06a-55f2-4462-b986-8704af7aed6a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:55:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bcfaa06a-55f2-4462-b986-8704af7aed6a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bef56b/rate-test-model-bef56b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:55:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bcfaa06a-55f2-4462-b986-8704af7aed6a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:55:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bcfaa06a-55f2-4462-b986-8704af7aed6a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T16:55:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bcfaa06a-55f2-4462-b986-8704af7aed6a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-908b00"}
{"level":"debug","ts":"2026-07-09T16:55:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bcfaa06a-55f2-4462-b986-8704af7aed6a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T16:55:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bcfaa06a-55f2-4462-b986-8704af7aed6a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"98beff11-a1ae-4e17-8e64-cad6eb2a690d","keyName":"e2e-rate-a-908b00","selected_subscription":"e2e-rate-iso-a-908b00","selected_subscription_key":"ai-tenant-e2e-shared-a-bef56b/e2e-rate-iso-a-908b00@ai-tenant-e2e-shared-a-bef56b/rate-test-model-bef56b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-bef56b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-908b00","namespace":"ai-tenant-e2e-shared-a-bef56b","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T16:55:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bcfaa06a-55f2-4462-b986-8704af7aed6a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T16:55:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bcfaa06a-55f2-4462-b986-8704af7aed6a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T16:55:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a566370a-f796-4f85-94e5-b73f5c48b009","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:52140","PortSpecifier":{"PortValue":52140}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a566370a-f796-4f85-94e5-b73f5c48b009","method":"POST","path":"/ai-tenant-e2e-shared-b-6bf011/rate-test-model-6bf011/v1/completions","host":"e2e-shared-b-6bf011.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T16:55:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a566370a-f796-4f85-94e5-b73f5c48b009","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:52140","PortSpecifier":{"PortValue":52140}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783616144,"nanos":419473478},"http":{"id":"a566370a-f796-4f85-94e5-b73f5c48b009","method":"POST","headers":{":authority":"e2e-shared-b-6bf011.apps.58cf2086-d0d7-461f-9ff4-8c696e1ec923.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-6bf011/rate-test-model-6bf011/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T16:55:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a566370a-f796-4f85-94e5-b73f5c48b009","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-rcwngX1ifrXQ2925_fIo7o7NmesHbAsT2x9ki6XcCgnQCF23mTVymHXAKHCC"}
{"level":"debug","ts":"2026-07-09T16:55:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a566370a-f796-4f85-94e5-b73f5c48b009","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-6bf011.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-rcwngX1ifrXQ2925_fIo7o7NmesHbAsT2x9ki6XcCgnQCF23mTVymHXAKHCC\"}"}
{"level":"debug","ts":"2026-07-09T16:55:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a566370a-f796-4f85-94e5-b73f5c48b009","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-6bf011.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"00e6b397-4749-4150-939e-e4633d72df93","keyName":"e2e-rate-b-908b00","subscription":"e2e-rate-iso-b-908b00","tenant":"e2e-shared-b-6bf011","userId":"00e6b397-4749-4150-939e-e4633d72df93","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T16:55:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a566370a-f796-4f85-94e5-b73f5c48b009","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-6bf011.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-6bf011/rate-test-model-6bf011\",\"requestedSubscription\":\"e2e-rate-iso-b-908b00\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T16:55:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a566370a-f796-4f85-94e5-b73f5c48b009","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-6bf011.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6bf011","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-908b00","namespace":"ai-tenant-e2e-shared-b-6bf011","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T16:55:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a566370a-f796-4f85-94e5-b73f5c48b009","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T16:55:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a566370a-f796-4f85-94e5-b73f5c48b009","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:55:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a566370a-f796-4f85-94e5-b73f5c48b009","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:55:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a566370a-f796-4f85-94e5-b73f5c48b009","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6bf011/rate-test-model-6bf011\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:55:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a566370a-f796-4f85-94e5-b73f5c48b009","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T16:55:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a566370a-f796-4f85-94e5-b73f5c48b009","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T16:55:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a566370a-f796-4f85-94e5-b73f5c48b009","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-908b00"}
{"level":"debug","ts":"2026-07-09T16:55:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a566370a-f796-4f85-94e5-b73f5c48b009","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T16:55:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a566370a-f796-4f85-94e5-b73f5c48b009","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"00e6b397-4749-4150-939e-e4633d72df93","keyName":"e2e-rate-b-908b00","selected_subscription":"e2e-rate-iso-b-908b00","selected_subscription_key":"ai-tenant-e2e-shared-b-6bf011/e2e-rate-iso-b-908b00@ai-tenant-e2e-shared-b-6bf011/rate-test-model-6bf011","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6bf011","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-908b00","namespace":"ai-tenant-e2e-shared-b-6bf011","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T16:55:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a566370a-f796-4f85-94e5-b73f5c48b009","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T16:55:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a566370a-f796-4f85-94e5-b73f5c48b009","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T16:55:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8644d86cafc4cd9af16b9ec4f0241fa5e539ed4326bec578db0ebbfee884aff7"}
{"level":"info","ts":"2026-07-09T16:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f2a2059953cd614c36aed4a45db6d306c50fb31034655b0c99db042cc065aa1d"}
{"level":"info","ts":"2026-07-09T16:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/70310f404112f3a9e2cdb614f3592e8c65292837bf6f4bf442536b94eab87919"}
{"level":"info","ts":"2026-07-09T16:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6bf4866826450c6e5e75e27e6ee08dd340f68d74847a0d0e3c322a8fdc473355"}
{"level":"info","ts":"2026-07-09T16:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/27b1846bbb07e61ad528f27deaaba0d1bfd5e3ab3f8f1596ddef97ddc1ead7b5"}
{"level":"info","ts":"2026-07-09T16:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6d353bf32b5aefddcfe41db7674600aa0dbd623c20cc743fb6e06725a75e5f00"}
{"level":"info","ts":"2026-07-09T16:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/890c9d6664452a452c0756e89853341160395adc735eb026ba86e5c5c63f005e"}
{"level":"info","ts":"2026-07-09T16:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7b59d5d2556d07d386db7c285e1299a61dfc27b9e32588b4dea081e925a9cfec"}
{"level":"info","ts":"2026-07-09T16:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a91ee4e79cd641d97e2def52ca9a6865609a491959e6a8329abe084355b9ca91"}
{"level":"info","ts":"2026-07-09T16:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2760ae0a4925f92dd3a44348ee789fe74d2ad983418447edeeec31e5e967debd"}
{"level":"info","ts":"2026-07-09T16:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5340ab49c7e0047dd31bd618e2c9a5708884b292d1aa7696a001df90bd2e99ce"}
{"level":"info","ts":"2026-07-09T16:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/014bd724b8587fc22fbf6521e5825080aea1b41d0a58dcee40923e86d1b124d7"}
{"level":"info","ts":"2026-07-09T16:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c17f75bd00e256368d3f83b26dbbd4067fb2c822425cb7bca8cf519e4a45b3c7"}
{"level":"info","ts":"2026-07-09T16:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b52c0e0f68686dcfb5ba58e26bd5d52f59bf7d638d42db746c77324e32a446ad"}
{"level":"info","ts":"2026-07-09T16:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5d31a9df17f866f844504e9fa3b7fae696172b110de807923c9068b89c44457b"}
{"level":"info","ts":"2026-07-09T16:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/acf4178859bca305c71d5e4e6485cac3530cd08cd789e0fbc278389d8d937ca1"}
{"level":"info","ts":"2026-07-09T16:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3942ecbd320f580709360526396dbff8a176e2a62d6c1e598d97bf7e6478feef"}
{"level":"info","ts":"2026-07-09T16:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/71388d8adfefe7c1103db4d6aa7b37eac01057f9b68d00215057073493832e8e"}
{"level":"info","ts":"2026-07-09T16:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/334979cfe3d72917cf050080a8372b551ace6f3d153eb80a945b1e8e57c59963"}
{"level":"info","ts":"2026-07-09T16:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/043e9366356ee2d3bfa31befc24aaace076873feb55824d159f960993e657d29"}
{"level":"info","ts":"2026-07-09T16:56:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3ddd7728a30af0ce5c1ed50f9cbdd8b44aeacdd369ed5215481967d231ee4dd6"}
{"level":"info","ts":"2026-07-09T16:56:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/10b7ae3c3d47247c959ee62d1b6f9aa0f841e0165d2f918227b4327ec5b1a3d6"}
{"level":"info","ts":"2026-07-09T16:56:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/28be827e9e465483c1a86ba02840129ea887a29aa8440b8406050c6a04e723a5"}
{"level":"info","ts":"2026-07-09T16:56:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a1c5b936252b577f498c93fac77f8fd8e13cd9b1b72e8e28f529af065382b8f1"}