--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"debug","ts":"2026-07-07T18:28:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"13e64183-6023-4e4d-92bb-80699b89cde4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:28:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13e64183-6023-4e4d-92bb-80699b89cde4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:28:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13e64183-6023-4e4d-92bb-80699b89cde4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:28:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13e64183-6023-4e4d-92bb-80699b89cde4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:28:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13e64183-6023-4e4d-92bb-80699b89cde4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-inf-a-95ab96/test-model-95ab96\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:28:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13e64183-6023-4e4d-92bb-80699b89cde4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T18:28:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13e64183-6023-4e4d-92bb-80699b89cde4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"test-model-95ab96-sub"}
{"level":"debug","ts":"2026-07-07T18:28:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13e64183-6023-4e4d-92bb-80699b89cde4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T18:28:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13e64183-6023-4e4d-92bb-80699b89cde4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"012ca40f-f0fd-44fd-a534-4a6ee0826127","keyName":"e2e-tenant-inference-95ab96","selected_subscription":"test-model-95ab96-sub","selected_subscription_key":"ai-tenant-e2e-inf-a-95ab96/test-model-95ab96-sub@ai-tenant-e2e-inf-a-95ab96/test-model-95ab96","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"test-model-95ab96","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"test-model-95ab96-sub","namespace":"ai-tenant-e2e-inf-a-95ab96","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T18:28:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"13e64183-6023-4e4d-92bb-80699b89cde4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:28:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"13e64183-6023-4e4d-92bb-80699b89cde4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:28:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9fca3ca1-24b8-4ee6-9346-cdc8fd6646d7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:39766","PortSpecifier":{"PortValue":39766}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9fca3ca1-24b8-4ee6-9346-cdc8fd6646d7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-inf-a-95ab96.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:28:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9fca3ca1-24b8-4ee6-9346-cdc8fd6646d7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:39766","PortSpecifier":{"PortValue":39766}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783448900,"nanos":202699821},"http":{"id":"9fca3ca1-24b8-4ee6-9346-cdc8fd6646d7","method":"POST","headers":{":authority":"e2e-inf-a-95ab96.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:28:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9fca3ca1-24b8-4ee6-9346-cdc8fd6646d7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T18:28:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9fca3ca1-24b8-4ee6-9346-cdc8fd6646d7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"13165771-7ad0-4fee-91b3-c3ee0a976429","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d354d02-b562-46f4-8cbc-cd983e35664b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/67bf82c58916"]}}
{"level":"debug","ts":"2026-07-07T18:28:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9fca3ca1-24b8-4ee6-9346-cdc8fd6646d7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/67bf82c58916"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d354d02-b562-46f4-8cbc-cd983e35664b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"13165771-7ad0-4fee-91b3-c3ee0a976429","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"08e31433936767b2dc1f1046fc7e84485eae1dd175509e654f16298be9fa52e4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-a-95ab96.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:28:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9fca3ca1-24b8-4ee6-9346-cdc8fd6646d7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:28:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9fca3ca1-24b8-4ee6-9346-cdc8fd6646d7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:28:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9fca3ca1-24b8-4ee6-9346-cdc8fd6646d7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-inf-a-95ab96/test-model-95ab96\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:28:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9fca3ca1-24b8-4ee6-9346-cdc8fd6646d7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T18:28:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9fca3ca1-24b8-4ee6-9346-cdc8fd6646d7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T18:28:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9fca3ca1-24b8-4ee6-9346-cdc8fd6646d7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T18:28:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9fca3ca1-24b8-4ee6-9346-cdc8fd6646d7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:28:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9fca3ca1-24b8-4ee6-9346-cdc8fd6646d7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:28:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"59c5ee26-48ac-476c-abfb-6e2bb5c6a68b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:36350","PortSpecifier":{"PortValue":36350}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"59c5ee26-48ac-476c-abfb-6e2bb5c6a68b","method":"POST","path":"/ai-tenant-e2e-inf-b-46d729/test-model-46d729/v1/chat/completions","host":"e2e-inf-b-46d729.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:28:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"59c5ee26-48ac-476c-abfb-6e2bb5c6a68b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:36350","PortSpecifier":{"PortValue":36350}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783448900,"nanos":250427402},"http":{"id":"59c5ee26-48ac-476c-abfb-6e2bb5c6a68b","method":"POST","headers":{":authority":"e2e-inf-b-46d729.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-b-46d729/test-model-46d729/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:28:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"59c5ee26-48ac-476c-abfb-6e2bb5c6a68b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-11tX292ocW24C0k3E_62kaZVxmBUY1c5v1ATMpzRRIbu1wJPkNxfGDUIaXujh"}
{"level":"debug","ts":"2026-07-07T18:28:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"59c5ee26-48ac-476c-abfb-6e2bb5c6a68b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-inf-b-46d729.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-11tX292ocW24C0k3E_62kaZVxmBUY1c5v1ATMpzRRIbu1wJPkNxfGDUIaXujh\"}"}
{"level":"debug","ts":"2026-07-07T18:28:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"59c5ee26-48ac-476c-abfb-6e2bb5c6a68b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-b-46d729.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-07T18:28:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"cannot fetch metadata","request id":"59c5ee26-48ac-476c-abfb-6e2bb5c6a68b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-b-46d729.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"reason":"no such key: groups"}
{"level":"debug","ts":"2026-07-07T18:28:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"59c5ee26-48ac-476c-abfb-6e2bb5c6a68b","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"956979b61ec4aec868a2c3528a4e212d3eb0a0b875375f73b4b57714b373116f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-b-46d729.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-b-46d729/test-model-46d729/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:28:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59c5ee26-48ac-476c-abfb-6e2bb5c6a68b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:28:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"59c5ee26-48ac-476c-abfb-6e2bb5c6a68b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-07T18:28:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"59c5ee26-48ac-476c-abfb-6e2bb5c6a68b","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-07T18:28:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"59c5ee26-48ac-476c-abfb-6e2bb5c6a68b","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-07T18:28:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d730c80e9a5c3658692c74c8718e96986906163001a467cf3bb5e41e09392039"}
{"level":"info","ts":"2026-07-07T18:28:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/297ca6311e7d1f0139d33c024498bcbbdfac2f3cd3c495c3daeb4d06a9d8d6c1"}
{"level":"info","ts":"2026-07-07T18:28:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e4576ef27874122914bfbc38ffa8086cca49654fe147cef3504c3a4a04e18540"}
{"level":"info","ts":"2026-07-07T18:28:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/499b4dda7e363b8bb5544ab9f9318ab3dedcfe19c00f06e56283dac4db36ec7b"}
{"level":"info","ts":"2026-07-07T18:28:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1492a971f9f6816ef8b86c72f1fde9940ce86b0c80bb2a07fa54f5ea3b22528f"}
{"level":"info","ts":"2026-07-07T18:28:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f86b977f3f5e5a6312c8b3556c32dfbb55a05e4aa5335e67dbcadfd152b6f957"}
{"level":"info","ts":"2026-07-07T18:28:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/956979b61ec4aec868a2c3528a4e212d3eb0a0b875375f73b4b57714b373116f"}
{"level":"info","ts":"2026-07-07T18:28:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0b2ae8264820e4c79391a0da4329f5d6fa2e38285a79a8025b33000913e824a1"}
{"level":"info","ts":"2026-07-07T18:28:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/065199649f2b0360570e54d67d7f7c3ae98a143e1de21fe1e7c86817199e055e"}
{"level":"info","ts":"2026-07-07T18:28:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/182f3e583329556271f9f97d643018bd0974fb41e42e68920b8fdf428de9ec58"}
{"level":"info","ts":"2026-07-07T18:28:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/68a361ff442fed9504562c52ebfcdbe1c207c080e3060b76c01a9f981916dade"}
{"level":"info","ts":"2026-07-07T18:28:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f2c4db81995e0cdbb11ab28b5965b4bc0f0fb061b4290d5911a356955306b76"}
{"level":"info","ts":"2026-07-07T18:28:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/77f54283d938ee22b72b62729530b569cf7fed1a80993ea33f7ba67139503fe3"}
{"level":"info","ts":"2026-07-07T18:28:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e5d9d1455dcf10bfee56f06d7606eb0285d1700992d881d105138aa155dd3a2d"}
{"level":"info","ts":"2026-07-07T18:28:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fd0a488dfd97ba3af1c494db402d3683beee87ec9fcf72aa760aaa3ccf2a6e46"}
{"level":"info","ts":"2026-07-07T18:28:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ba53e92bb4894c184dfe5e39bc1755eef12137922d0d35b19c966ef6815c477"}
{"level":"info","ts":"2026-07-07T18:28:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7f82b3ddfd9226afbdf2a7c4b9a0ecdee48c35adb66a0e4dfb9fb21af6a817e0"}
{"level":"info","ts":"2026-07-07T18:28:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/08e31433936767b2dc1f1046fc7e84485eae1dd175509e654f16298be9fa52e4"}
{"level":"info","ts":"2026-07-07T18:29:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/18a8e46934a1ad8fdac199ec831828e2dcb5d82214809ac8c7546a4e44c0c970"}
{"level":"info","ts":"2026-07-07T18:29:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b4418d2a0fa464b047c4c51ac191a02d884b04bfd28bbb295f55b308a0ddf824"}
{"level":"debug","ts":"2026-07-07T18:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a7c228815782156a75a3245510a9bcf49eee8c615644ebba77819d3f5b08a4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:29:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:29:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a7c228815782156a75a3245510a9bcf49eee8c615644ebba77819d3f5b08a4c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a7c228815782156a75a3245510a9bcf49eee8c615644ebba77819d3f5b08a4c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a7c228815782156a75a3245510a9bcf49eee8c615644ebba77819d3f5b08a4c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a7c228815782156a75a3245510a9bcf49eee8c615644ebba77819d3f5b08a4c"}
{"level":"debug","ts":"2026-07-07T18:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a7c228815782156a75a3245510a9bcf49eee8c615644ebba77819d3f5b08a4c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a7c228815782156a75a3245510a9bcf49eee8c615644ebba77819d3f5b08a4c"}
{"level":"debug","ts":"2026-07-07T18:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a7c228815782156a75a3245510a9bcf49eee8c615644ebba77819d3f5b08a4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:29:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:29:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a7c228815782156a75a3245510a9bcf49eee8c615644ebba77819d3f5b08a4c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:29:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a7c228815782156a75a3245510a9bcf49eee8c615644ebba77819d3f5b08a4c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:29:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a7c228815782156a75a3245510a9bcf49eee8c615644ebba77819d3f5b08a4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:29:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:29:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:29:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a7c228815782156a75a3245510a9bcf49eee8c615644ebba77819d3f5b08a4c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:29:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a7c228815782156a75a3245510a9bcf49eee8c615644ebba77819d3f5b08a4c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:29:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a7c228815782156a75a3245510a9bcf49eee8c615644ebba77819d3f5b08a4c"}
{"level":"debug","ts":"2026-07-07T18:29:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a7c228815782156a75a3245510a9bcf49eee8c615644ebba77819d3f5b08a4c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:29:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a7c228815782156a75a3245510a9bcf49eee8c615644ebba77819d3f5b08a4c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:29:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a7c228815782156a75a3245510a9bcf49eee8c615644ebba77819d3f5b08a4c"}
{"level":"debug","ts":"2026-07-07T18:29:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a7c228815782156a75a3245510a9bcf49eee8c615644ebba77819d3f5b08a4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:29:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:29:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a7c228815782156a75a3245510a9bcf49eee8c615644ebba77819d3f5b08a4c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:29:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a7c228815782156a75a3245510a9bcf49eee8c615644ebba77819d3f5b08a4c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:29:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"757d2bddc7a323a0cade4c9fe2ef434e98af35c9d7d84b554c9591265bf20ea7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:29:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:29:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:29:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/757d2bddc7a323a0cade4c9fe2ef434e98af35c9d7d84b554c9591265bf20ea7"}
{"level":"info","ts":"2026-07-07T18:29:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"757d2bddc7a323a0cade4c9fe2ef434e98af35c9d7d84b554c9591265bf20ea7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:29:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a7c228815782156a75a3245510a9bcf49eee8c615644ebba77819d3f5b08a4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:29:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:29:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:29:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a7c228815782156a75a3245510a9bcf49eee8c615644ebba77819d3f5b08a4c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:29:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"757d2bddc7a323a0cade4c9fe2ef434e98af35c9d7d84b554c9591265bf20ea7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:29:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:29:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["757d2bddc7a323a0cade4c9fe2ef434e98af35c9d7d84b554c9591265bf20ea7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:29:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a7c228815782156a75a3245510a9bcf49eee8c615644ebba77819d3f5b08a4c"}
{"level":"info","ts":"2026-07-07T18:29:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/757d2bddc7a323a0cade4c9fe2ef434e98af35c9d7d84b554c9591265bf20ea7"}
{"level":"info","ts":"2026-07-07T18:29:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"757d2bddc7a323a0cade4c9fe2ef434e98af35c9d7d84b554c9591265bf20ea7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:29:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a7c228815782156a75a3245510a9bcf49eee8c615644ebba77819d3f5b08a4c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:29:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"757d2bddc7a323a0cade4c9fe2ef434e98af35c9d7d84b554c9591265bf20ea7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:29:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a7c228815782156a75a3245510a9bcf49eee8c615644ebba77819d3f5b08a4c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:29:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a7c228815782156a75a3245510a9bcf49eee8c615644ebba77819d3f5b08a4c"}
{"level":"debug","ts":"2026-07-07T18:29:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a7c228815782156a75a3245510a9bcf49eee8c615644ebba77819d3f5b08a4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:29:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:29:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a7c228815782156a75a3245510a9bcf49eee8c615644ebba77819d3f5b08a4c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:29:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/757d2bddc7a323a0cade4c9fe2ef434e98af35c9d7d84b554c9591265bf20ea7"}
{"level":"info","ts":"2026-07-07T18:29:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a7c228815782156a75a3245510a9bcf49eee8c615644ebba77819d3f5b08a4c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:29:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a7c228815782156a75a3245510a9bcf49eee8c615644ebba77819d3f5b08a4c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:29:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a7c228815782156a75a3245510a9bcf49eee8c615644ebba77819d3f5b08a4c"}
{"level":"debug","ts":"2026-07-07T18:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33c72017cb1f550ffc3a66f94ee9ccfbf061f968388a058d5dff9998bf01e6a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:29:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:29:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33c72017cb1f550ffc3a66f94ee9ccfbf061f968388a058d5dff9998bf01e6a9"}
{"level":"info","ts":"2026-07-07T18:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33c72017cb1f550ffc3a66f94ee9ccfbf061f968388a058d5dff9998bf01e6a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33c72017cb1f550ffc3a66f94ee9ccfbf061f968388a058d5dff9998bf01e6a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33c72017cb1f550ffc3a66f94ee9ccfbf061f968388a058d5dff9998bf01e6a9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33c72017cb1f550ffc3a66f94ee9ccfbf061f968388a058d5dff9998bf01e6a9"}
{"level":"debug","ts":"2026-07-07T18:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33c72017cb1f550ffc3a66f94ee9ccfbf061f968388a058d5dff9998bf01e6a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:29:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:29:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33c72017cb1f550ffc3a66f94ee9ccfbf061f968388a058d5dff9998bf01e6a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33c72017cb1f550ffc3a66f94ee9ccfbf061f968388a058d5dff9998bf01e6a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33c72017cb1f550ffc3a66f94ee9ccfbf061f968388a058d5dff9998bf01e6a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:29:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:29:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33c72017cb1f550ffc3a66f94ee9ccfbf061f968388a058d5dff9998bf01e6a9"}
{"level":"info","ts":"2026-07-07T18:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33c72017cb1f550ffc3a66f94ee9ccfbf061f968388a058d5dff9998bf01e6a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33c72017cb1f550ffc3a66f94ee9ccfbf061f968388a058d5dff9998bf01e6a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33c72017cb1f550ffc3a66f94ee9ccfbf061f968388a058d5dff9998bf01e6a9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33c72017cb1f550ffc3a66f94ee9ccfbf061f968388a058d5dff9998bf01e6a9"}
{"level":"debug","ts":"2026-07-07T18:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33c72017cb1f550ffc3a66f94ee9ccfbf061f968388a058d5dff9998bf01e6a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:29:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:29:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33c72017cb1f550ffc3a66f94ee9ccfbf061f968388a058d5dff9998bf01e6a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33c72017cb1f550ffc3a66f94ee9ccfbf061f968388a058d5dff9998bf01e6a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33c72017cb1f550ffc3a66f94ee9ccfbf061f968388a058d5dff9998bf01e6a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:29:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:29:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33c72017cb1f550ffc3a66f94ee9ccfbf061f968388a058d5dff9998bf01e6a9"}
{"level":"info","ts":"2026-07-07T18:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33c72017cb1f550ffc3a66f94ee9ccfbf061f968388a058d5dff9998bf01e6a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"492fbc566faaf0826ef30cfdba614d552bce3e7802a2665758bc7948a79e0aff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:29:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:29:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/492fbc566faaf0826ef30cfdba614d552bce3e7802a2665758bc7948a79e0aff"}
{"level":"info","ts":"2026-07-07T18:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"492fbc566faaf0826ef30cfdba614d552bce3e7802a2665758bc7948a79e0aff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33c72017cb1f550ffc3a66f94ee9ccfbf061f968388a058d5dff9998bf01e6a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"492fbc566faaf0826ef30cfdba614d552bce3e7802a2665758bc7948a79e0aff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:29:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:29:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["492fbc566faaf0826ef30cfdba614d552bce3e7802a2665758bc7948a79e0aff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33c72017cb1f550ffc3a66f94ee9ccfbf061f968388a058d5dff9998bf01e6a9"}
{"level":"info","ts":"2026-07-07T18:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"492fbc566faaf0826ef30cfdba614d552bce3e7802a2665758bc7948a79e0aff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33c72017cb1f550ffc3a66f94ee9ccfbf061f968388a058d5dff9998bf01e6a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:29:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:29:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33c72017cb1f550ffc3a66f94ee9ccfbf061f968388a058d5dff9998bf01e6a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/492fbc566faaf0826ef30cfdba614d552bce3e7802a2665758bc7948a79e0aff"}
{"level":"info","ts":"2026-07-07T18:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33c72017cb1f550ffc3a66f94ee9ccfbf061f968388a058d5dff9998bf01e6a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"492fbc566faaf0826ef30cfdba614d552bce3e7802a2665758bc7948a79e0aff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:29:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:29:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/492fbc566faaf0826ef30cfdba614d552bce3e7802a2665758bc7948a79e0aff"}
{"level":"info","ts":"2026-07-07T18:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"492fbc566faaf0826ef30cfdba614d552bce3e7802a2665758bc7948a79e0aff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33c72017cb1f550ffc3a66f94ee9ccfbf061f968388a058d5dff9998bf01e6a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:29:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:29:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33c72017cb1f550ffc3a66f94ee9ccfbf061f968388a058d5dff9998bf01e6a9"}
{"level":"info","ts":"2026-07-07T18:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33c72017cb1f550ffc3a66f94ee9ccfbf061f968388a058d5dff9998bf01e6a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"492fbc566faaf0826ef30cfdba614d552bce3e7802a2665758bc7948a79e0aff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33c72017cb1f550ffc3a66f94ee9ccfbf061f968388a058d5dff9998bf01e6a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:29:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:29:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33c72017cb1f550ffc3a66f94ee9ccfbf061f968388a058d5dff9998bf01e6a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/492fbc566faaf0826ef30cfdba614d552bce3e7802a2665758bc7948a79e0aff"}
{"level":"info","ts":"2026-07-07T18:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33c72017cb1f550ffc3a66f94ee9ccfbf061f968388a058d5dff9998bf01e6a9"}
{"level":"info","ts":"2026-07-07T18:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33c72017cb1f550ffc3a66f94ee9ccfbf061f968388a058d5dff9998bf01e6a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"492fbc566faaf0826ef30cfdba614d552bce3e7802a2665758bc7948a79e0aff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:29:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:29:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["492fbc566faaf0826ef30cfdba614d552bce3e7802a2665758bc7948a79e0aff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33c72017cb1f550ffc3a66f94ee9ccfbf061f968388a058d5dff9998bf01e6a9"}
{"level":"info","ts":"2026-07-07T18:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"492fbc566faaf0826ef30cfdba614d552bce3e7802a2665758bc7948a79e0aff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33c72017cb1f550ffc3a66f94ee9ccfbf061f968388a058d5dff9998bf01e6a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"492fbc566faaf0826ef30cfdba614d552bce3e7802a2665758bc7948a79e0aff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:29:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:29:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"492fbc566faaf0826ef30cfdba614d552bce3e7802a2665758bc7948a79e0aff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"492fbc566faaf0826ef30cfdba614d552bce3e7802a2665758bc7948a79e0aff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"492fbc566faaf0826ef30cfdba614d552bce3e7802a2665758bc7948a79e0aff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/492fbc566faaf0826ef30cfdba614d552bce3e7802a2665758bc7948a79e0aff"}
{"level":"debug","ts":"2026-07-07T18:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"492fbc566faaf0826ef30cfdba614d552bce3e7802a2665758bc7948a79e0aff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/492fbc566faaf0826ef30cfdba614d552bce3e7802a2665758bc7948a79e0aff"}
{"level":"debug","ts":"2026-07-07T18:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"492fbc566faaf0826ef30cfdba614d552bce3e7802a2665758bc7948a79e0aff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:29:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:29:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["492fbc566faaf0826ef30cfdba614d552bce3e7802a2665758bc7948a79e0aff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"492fbc566faaf0826ef30cfdba614d552bce3e7802a2665758bc7948a79e0aff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"492fbc566faaf0826ef30cfdba614d552bce3e7802a2665758bc7948a79e0aff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/492fbc566faaf0826ef30cfdba614d552bce3e7802a2665758bc7948a79e0aff"}
{"level":"info","ts":"2026-07-07T18:29:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8a7c228815782156a75a3245510a9bcf49eee8c615644ebba77819d3f5b08a4c"}
{"level":"info","ts":"2026-07-07T18:29:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/757d2bddc7a323a0cade4c9fe2ef434e98af35c9d7d84b554c9591265bf20ea7"}
{"level":"info","ts":"2026-07-07T18:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/492fbc566faaf0826ef30cfdba614d552bce3e7802a2665758bc7948a79e0aff"}
{"level":"info","ts":"2026-07-07T18:29:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/33c72017cb1f550ffc3a66f94ee9ccfbf061f968388a058d5dff9998bf01e6a9"}
{"level":"debug","ts":"2026-07-07T18:30:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63d61091532e54bd0abab082041cf63a71784aee8b8fe7279e5d861b1397a9dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:30:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:30:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63d61091532e54bd0abab082041cf63a71784aee8b8fe7279e5d861b1397a9dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63d61091532e54bd0abab082041cf63a71784aee8b8fe7279e5d861b1397a9dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63d61091532e54bd0abab082041cf63a71784aee8b8fe7279e5d861b1397a9dc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:30:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63d61091532e54bd0abab082041cf63a71784aee8b8fe7279e5d861b1397a9dc"}
{"level":"debug","ts":"2026-07-07T18:30:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63d61091532e54bd0abab082041cf63a71784aee8b8fe7279e5d861b1397a9dc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:30:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63d61091532e54bd0abab082041cf63a71784aee8b8fe7279e5d861b1397a9dc"}
{"level":"debug","ts":"2026-07-07T18:30:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63d61091532e54bd0abab082041cf63a71784aee8b8fe7279e5d861b1397a9dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:30:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:30:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63d61091532e54bd0abab082041cf63a71784aee8b8fe7279e5d861b1397a9dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63d61091532e54bd0abab082041cf63a71784aee8b8fe7279e5d861b1397a9dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63d61091532e54bd0abab082041cf63a71784aee8b8fe7279e5d861b1397a9dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:30:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:30:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63d61091532e54bd0abab082041cf63a71784aee8b8fe7279e5d861b1397a9dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63d61091532e54bd0abab082041cf63a71784aee8b8fe7279e5d861b1397a9dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63d61091532e54bd0abab082041cf63a71784aee8b8fe7279e5d861b1397a9dc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:30:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63d61091532e54bd0abab082041cf63a71784aee8b8fe7279e5d861b1397a9dc"}
{"level":"debug","ts":"2026-07-07T18:30:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63d61091532e54bd0abab082041cf63a71784aee8b8fe7279e5d861b1397a9dc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:30:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63d61091532e54bd0abab082041cf63a71784aee8b8fe7279e5d861b1397a9dc"}
{"level":"debug","ts":"2026-07-07T18:30:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63d61091532e54bd0abab082041cf63a71784aee8b8fe7279e5d861b1397a9dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:30:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:30:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63d61091532e54bd0abab082041cf63a71784aee8b8fe7279e5d861b1397a9dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63d61091532e54bd0abab082041cf63a71784aee8b8fe7279e5d861b1397a9dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63d61091532e54bd0abab082041cf63a71784aee8b8fe7279e5d861b1397a9dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:30:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:30:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63d61091532e54bd0abab082041cf63a71784aee8b8fe7279e5d861b1397a9dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63d61091532e54bd0abab082041cf63a71784aee8b8fe7279e5d861b1397a9dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63d61091532e54bd0abab082041cf63a71784aee8b8fe7279e5d861b1397a9dc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:30:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63d61091532e54bd0abab082041cf63a71784aee8b8fe7279e5d861b1397a9dc"}
{"level":"debug","ts":"2026-07-07T18:30:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63d61091532e54bd0abab082041cf63a71784aee8b8fe7279e5d861b1397a9dc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:30:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63d61091532e54bd0abab082041cf63a71784aee8b8fe7279e5d861b1397a9dc"}
{"level":"debug","ts":"2026-07-07T18:30:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63d61091532e54bd0abab082041cf63a71784aee8b8fe7279e5d861b1397a9dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:30:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:30:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63d61091532e54bd0abab082041cf63a71784aee8b8fe7279e5d861b1397a9dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63d61091532e54bd0abab082041cf63a71784aee8b8fe7279e5d861b1397a9dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c7d4e41ddb1bd416f2d5908a7bb8464816d48c020133e80633d04485d41709e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:30:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:30:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c7d4e41ddb1bd416f2d5908a7bb8464816d48c020133e80633d04485d41709e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63d61091532e54bd0abab082041cf63a71784aee8b8fe7279e5d861b1397a9dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c7d4e41ddb1bd416f2d5908a7bb8464816d48c020133e80633d04485d41709e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c7d4e41ddb1bd416f2d5908a7bb8464816d48c020133e80633d04485d41709e"}
{"level":"debug","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c7d4e41ddb1bd416f2d5908a7bb8464816d48c020133e80633d04485d41709e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:30:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:30:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c7d4e41ddb1bd416f2d5908a7bb8464816d48c020133e80633d04485d41709e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c7d4e41ddb1bd416f2d5908a7bb8464816d48c020133e80633d04485d41709e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c7d4e41ddb1bd416f2d5908a7bb8464816d48c020133e80633d04485d41709e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63d61091532e54bd0abab082041cf63a71784aee8b8fe7279e5d861b1397a9dc"}
{"level":"info","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c7d4e41ddb1bd416f2d5908a7bb8464816d48c020133e80633d04485d41709e"}
{"level":"debug","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5ceebf96bf20ff709697aa0a27b6c3bc92e1e18e5acf9540be7d3677e3194bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:30:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:30:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5ceebf96bf20ff709697aa0a27b6c3bc92e1e18e5acf9540be7d3677e3194bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5ceebf96bf20ff709697aa0a27b6c3bc92e1e18e5acf9540be7d3677e3194bc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5ceebf96bf20ff709697aa0a27b6c3bc92e1e18e5acf9540be7d3677e3194bc"}
{"level":"debug","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5ceebf96bf20ff709697aa0a27b6c3bc92e1e18e5acf9540be7d3677e3194bc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5ceebf96bf20ff709697aa0a27b6c3bc92e1e18e5acf9540be7d3677e3194bc"}
{"level":"debug","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5ceebf96bf20ff709697aa0a27b6c3bc92e1e18e5acf9540be7d3677e3194bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:30:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:30:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5ceebf96bf20ff709697aa0a27b6c3bc92e1e18e5acf9540be7d3677e3194bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5ceebf96bf20ff709697aa0a27b6c3bc92e1e18e5acf9540be7d3677e3194bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5ceebf96bf20ff709697aa0a27b6c3bc92e1e18e5acf9540be7d3677e3194bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:30:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:30:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5ceebf96bf20ff709697aa0a27b6c3bc92e1e18e5acf9540be7d3677e3194bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5ceebf96bf20ff709697aa0a27b6c3bc92e1e18e5acf9540be7d3677e3194bc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5ceebf96bf20ff709697aa0a27b6c3bc92e1e18e5acf9540be7d3677e3194bc"}
{"level":"debug","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5ceebf96bf20ff709697aa0a27b6c3bc92e1e18e5acf9540be7d3677e3194bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e59680078ecd7984855de3434d743bf4076b8f2934ed8a53cc37beabc676e994","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:30:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:30:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5ceebf96bf20ff709697aa0a27b6c3bc92e1e18e5acf9540be7d3677e3194bc"}
{"level":"info","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e59680078ecd7984855de3434d743bf4076b8f2934ed8a53cc37beabc676e994","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5ceebf96bf20ff709697aa0a27b6c3bc92e1e18e5acf9540be7d3677e3194bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:30:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:30:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5ceebf96bf20ff709697aa0a27b6c3bc92e1e18e5acf9540be7d3677e3194bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e59680078ecd7984855de3434d743bf4076b8f2934ed8a53cc37beabc676e994"}
{"level":"info","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5ceebf96bf20ff709697aa0a27b6c3bc92e1e18e5acf9540be7d3677e3194bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e59680078ecd7984855de3434d743bf4076b8f2934ed8a53cc37beabc676e994","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:30:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:30:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e59680078ecd7984855de3434d743bf4076b8f2934ed8a53cc37beabc676e994"}
{"level":"info","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e59680078ecd7984855de3434d743bf4076b8f2934ed8a53cc37beabc676e994","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5ceebf96bf20ff709697aa0a27b6c3bc92e1e18e5acf9540be7d3677e3194bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:30:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:30:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5ceebf96bf20ff709697aa0a27b6c3bc92e1e18e5acf9540be7d3677e3194bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e59680078ecd7984855de3434d743bf4076b8f2934ed8a53cc37beabc676e994","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:30:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:30:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e59680078ecd7984855de3434d743bf4076b8f2934ed8a53cc37beabc676e994"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5ceebf96bf20ff709697aa0a27b6c3bc92e1e18e5acf9540be7d3677e3194bc"}
{"level":"info","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e59680078ecd7984855de3434d743bf4076b8f2934ed8a53cc37beabc676e994","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5ceebf96bf20ff709697aa0a27b6c3bc92e1e18e5acf9540be7d3677e3194bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:30:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:30:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5ceebf96bf20ff709697aa0a27b6c3bc92e1e18e5acf9540be7d3677e3194bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e59680078ecd7984855de3434d743bf4076b8f2934ed8a53cc37beabc676e994"}
{"level":"info","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5ceebf96bf20ff709697aa0a27b6c3bc92e1e18e5acf9540be7d3677e3194bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e59680078ecd7984855de3434d743bf4076b8f2934ed8a53cc37beabc676e994","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bc22122fdde2a751ca1e208890c7f867164f22efea8dbfa8c0a273ca7b6d447","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:30:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:30:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bc22122fdde2a751ca1e208890c7f867164f22efea8dbfa8c0a273ca7b6d447","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5ceebf96bf20ff709697aa0a27b6c3bc92e1e18e5acf9540be7d3677e3194bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:30:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:30:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5ceebf96bf20ff709697aa0a27b6c3bc92e1e18e5acf9540be7d3677e3194bc"}
{"level":"info","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5ceebf96bf20ff709697aa0a27b6c3bc92e1e18e5acf9540be7d3677e3194bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bc22122fdde2a751ca1e208890c7f867164f22efea8dbfa8c0a273ca7b6d447","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5ceebf96bf20ff709697aa0a27b6c3bc92e1e18e5acf9540be7d3677e3194bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:30:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:30:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5ceebf96bf20ff709697aa0a27b6c3bc92e1e18e5acf9540be7d3677e3194bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e59680078ecd7984855de3434d743bf4076b8f2934ed8a53cc37beabc676e994"}
{"level":"info","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5ceebf96bf20ff709697aa0a27b6c3bc92e1e18e5acf9540be7d3677e3194bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bc22122fdde2a751ca1e208890c7f867164f22efea8dbfa8c0a273ca7b6d447","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:30:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:30:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bc22122fdde2a751ca1e208890c7f867164f22efea8dbfa8c0a273ca7b6d447","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5ceebf96bf20ff709697aa0a27b6c3bc92e1e18e5acf9540be7d3677e3194bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bc22122fdde2a751ca1e208890c7f867164f22efea8dbfa8c0a273ca7b6d447","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bc22122fdde2a751ca1e208890c7f867164f22efea8dbfa8c0a273ca7b6d447"}
{"level":"debug","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bc22122fdde2a751ca1e208890c7f867164f22efea8dbfa8c0a273ca7b6d447","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:30:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:30:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8bc22122fdde2a751ca1e208890c7f867164f22efea8dbfa8c0a273ca7b6d447"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5ceebf96bf20ff709697aa0a27b6c3bc92e1e18e5acf9540be7d3677e3194bc"}
{"level":"info","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bc22122fdde2a751ca1e208890c7f867164f22efea8dbfa8c0a273ca7b6d447","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bc22122fdde2a751ca1e208890c7f867164f22efea8dbfa8c0a273ca7b6d447","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:30:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:30:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bc22122fdde2a751ca1e208890c7f867164f22efea8dbfa8c0a273ca7b6d447"}
{"level":"info","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bc22122fdde2a751ca1e208890c7f867164f22efea8dbfa8c0a273ca7b6d447","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a30514bb9fb2e5c3795f74c9017e5be227d0157ac9a708eedbe5ebede08251f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:30:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:30:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a30514bb9fb2e5c3795f74c9017e5be227d0157ac9a708eedbe5ebede08251f2"}
{"level":"info","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a30514bb9fb2e5c3795f74c9017e5be227d0157ac9a708eedbe5ebede08251f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bc22122fdde2a751ca1e208890c7f867164f22efea8dbfa8c0a273ca7b6d447","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a30514bb9fb2e5c3795f74c9017e5be227d0157ac9a708eedbe5ebede08251f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:30:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:30:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a30514bb9fb2e5c3795f74c9017e5be227d0157ac9a708eedbe5ebede08251f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a30514bb9fb2e5c3795f74c9017e5be227d0157ac9a708eedbe5ebede08251f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bc22122fdde2a751ca1e208890c7f867164f22efea8dbfa8c0a273ca7b6d447","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a30514bb9fb2e5c3795f74c9017e5be227d0157ac9a708eedbe5ebede08251f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:30:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:30:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a30514bb9fb2e5c3795f74c9017e5be227d0157ac9a708eedbe5ebede08251f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bc22122fdde2a751ca1e208890c7f867164f22efea8dbfa8c0a273ca7b6d447"}
{"level":"error","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a30514bb9fb2e5c3795f74c9017e5be227d0157ac9a708eedbe5ebede08251f2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a30514bb9fb2e5c3795f74c9017e5be227d0157ac9a708eedbe5ebede08251f2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a30514bb9fb2e5c3795f74c9017e5be227d0157ac9a708eedbe5ebede08251f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:30:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:30:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a30514bb9fb2e5c3795f74c9017e5be227d0157ac9a708eedbe5ebede08251f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bc22122fdde2a751ca1e208890c7f867164f22efea8dbfa8c0a273ca7b6d447","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:30:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:30:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8bc22122fdde2a751ca1e208890c7f867164f22efea8dbfa8c0a273ca7b6d447"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a30514bb9fb2e5c3795f74c9017e5be227d0157ac9a708eedbe5ebede08251f2"}
{"level":"info","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bc22122fdde2a751ca1e208890c7f867164f22efea8dbfa8c0a273ca7b6d447","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a30514bb9fb2e5c3795f74c9017e5be227d0157ac9a708eedbe5ebede08251f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bc22122fdde2a751ca1e208890c7f867164f22efea8dbfa8c0a273ca7b6d447","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"419580df7a8529bc16213d7af4f552a8a3f945d00d74b2ccf9cd0fb200a2b195","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:30:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:30:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a30514bb9fb2e5c3795f74c9017e5be227d0157ac9a708eedbe5ebede08251f2"}
{"level":"info","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"419580df7a8529bc16213d7af4f552a8a3f945d00d74b2ccf9cd0fb200a2b195","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3440d51480b3a49c9abf723121eacd4157955a46c8d80edb260e7eb916c17e67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:30:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:30:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3440d51480b3a49c9abf723121eacd4157955a46c8d80edb260e7eb916c17e67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a30514bb9fb2e5c3795f74c9017e5be227d0157ac9a708eedbe5ebede08251f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:30:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:30:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a30514bb9fb2e5c3795f74c9017e5be227d0157ac9a708eedbe5ebede08251f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bc22122fdde2a751ca1e208890c7f867164f22efea8dbfa8c0a273ca7b6d447"}
{"level":"info","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a30514bb9fb2e5c3795f74c9017e5be227d0157ac9a708eedbe5ebede08251f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"419580df7a8529bc16213d7af4f552a8a3f945d00d74b2ccf9cd0fb200a2b195","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:30:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:30:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/419580df7a8529bc16213d7af4f552a8a3f945d00d74b2ccf9cd0fb200a2b195"}
{"level":"info","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"419580df7a8529bc16213d7af4f552a8a3f945d00d74b2ccf9cd0fb200a2b195","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b0c111acd99f6694417a6124fc3f335d1e9229d82669a04dcf9d4cd9349129b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:30:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:30:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b0c111acd99f6694417a6124fc3f335d1e9229d82669a04dcf9d4cd9349129b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3440d51480b3a49c9abf723121eacd4157955a46c8d80edb260e7eb916c17e67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:30:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:30:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3440d51480b3a49c9abf723121eacd4157955a46c8d80edb260e7eb916c17e67"}
{"level":"info","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3440d51480b3a49c9abf723121eacd4157955a46c8d80edb260e7eb916c17e67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a30514bb9fb2e5c3795f74c9017e5be227d0157ac9a708eedbe5ebede08251f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"419580df7a8529bc16213d7af4f552a8a3f945d00d74b2ccf9cd0fb200a2b195","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:30:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:30:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["419580df7a8529bc16213d7af4f552a8a3f945d00d74b2ccf9cd0fb200a2b195"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"419580df7a8529bc16213d7af4f552a8a3f945d00d74b2ccf9cd0fb200a2b195","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b0c111acd99f6694417a6124fc3f335d1e9229d82669a04dcf9d4cd9349129b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:30:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:30:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b0c111acd99f6694417a6124fc3f335d1e9229d82669a04dcf9d4cd9349129b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1d747a967e885e8d16192c83b3d61f0bc01df6ed1f3333b231772382d0f7d99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:30:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:30:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b0c111acd99f6694417a6124fc3f335d1e9229d82669a04dcf9d4cd9349129b"}
{"level":"info","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1d747a967e885e8d16192c83b3d61f0bc01df6ed1f3333b231772382d0f7d99","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3440d51480b3a49c9abf723121eacd4157955a46c8d80edb260e7eb916c17e67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:30:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:30:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3440d51480b3a49c9abf723121eacd4157955a46c8d80edb260e7eb916c17e67"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3440d51480b3a49c9abf723121eacd4157955a46c8d80edb260e7eb916c17e67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"419580df7a8529bc16213d7af4f552a8a3f945d00d74b2ccf9cd0fb200a2b195","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b0c111acd99f6694417a6124fc3f335d1e9229d82669a04dcf9d4cd9349129b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:30:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:30:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b0c111acd99f6694417a6124fc3f335d1e9229d82669a04dcf9d4cd9349129b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a30514bb9fb2e5c3795f74c9017e5be227d0157ac9a708eedbe5ebede08251f2"}
{"level":"info","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b0c111acd99f6694417a6124fc3f335d1e9229d82669a04dcf9d4cd9349129b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1d747a967e885e8d16192c83b3d61f0bc01df6ed1f3333b231772382d0f7d99","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3440d51480b3a49c9abf723121eacd4157955a46c8d80edb260e7eb916c17e67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b0c111acd99f6694417a6124fc3f335d1e9229d82669a04dcf9d4cd9349129b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1d747a967e885e8d16192c83b3d61f0bc01df6ed1f3333b231772382d0f7d99","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/419580df7a8529bc16213d7af4f552a8a3f945d00d74b2ccf9cd0fb200a2b195"}
{"level":"debug","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1d747a967e885e8d16192c83b3d61f0bc01df6ed1f3333b231772382d0f7d99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:30:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:30:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1d747a967e885e8d16192c83b3d61f0bc01df6ed1f3333b231772382d0f7d99"}
{"level":"info","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1d747a967e885e8d16192c83b3d61f0bc01df6ed1f3333b231772382d0f7d99","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1d747a967e885e8d16192c83b3d61f0bc01df6ed1f3333b231772382d0f7d99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:30:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:30:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1d747a967e885e8d16192c83b3d61f0bc01df6ed1f3333b231772382d0f7d99"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3440d51480b3a49c9abf723121eacd4157955a46c8d80edb260e7eb916c17e67"}
{"level":"info","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1d747a967e885e8d16192c83b3d61f0bc01df6ed1f3333b231772382d0f7d99","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1d747a967e885e8d16192c83b3d61f0bc01df6ed1f3333b231772382d0f7d99","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b0c111acd99f6694417a6124fc3f335d1e9229d82669a04dcf9d4cd9349129b"}
{"level":"debug","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1d747a967e885e8d16192c83b3d61f0bc01df6ed1f3333b231772382d0f7d99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:30:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:30:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1d747a967e885e8d16192c83b3d61f0bc01df6ed1f3333b231772382d0f7d99"}
{"level":"info","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1d747a967e885e8d16192c83b3d61f0bc01df6ed1f3333b231772382d0f7d99","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1d747a967e885e8d16192c83b3d61f0bc01df6ed1f3333b231772382d0f7d99","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1d747a967e885e8d16192c83b3d61f0bc01df6ed1f3333b231772382d0f7d99","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1d747a967e885e8d16192c83b3d61f0bc01df6ed1f3333b231772382d0f7d99"}
{"level":"debug","ts":"2026-07-07T18:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1d747a967e885e8d16192c83b3d61f0bc01df6ed1f3333b231772382d0f7d99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:30:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:30:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1d747a967e885e8d16192c83b3d61f0bc01df6ed1f3333b231772382d0f7d99"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1d747a967e885e8d16192c83b3d61f0bc01df6ed1f3333b231772382d0f7d99","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1d747a967e885e8d16192c83b3d61f0bc01df6ed1f3333b231772382d0f7d99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:30:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:30:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1d747a967e885e8d16192c83b3d61f0bc01df6ed1f3333b231772382d0f7d99","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1d747a967e885e8d16192c83b3d61f0bc01df6ed1f3333b231772382d0f7d99","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1d747a967e885e8d16192c83b3d61f0bc01df6ed1f3333b231772382d0f7d99","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1d747a967e885e8d16192c83b3d61f0bc01df6ed1f3333b231772382d0f7d99"}
{"level":"debug","ts":"2026-07-07T18:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1d747a967e885e8d16192c83b3d61f0bc01df6ed1f3333b231772382d0f7d99","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1d747a967e885e8d16192c83b3d61f0bc01df6ed1f3333b231772382d0f7d99"}
{"level":"debug","ts":"2026-07-07T18:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1d747a967e885e8d16192c83b3d61f0bc01df6ed1f3333b231772382d0f7d99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:30:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:30:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1d747a967e885e8d16192c83b3d61f0bc01df6ed1f3333b231772382d0f7d99"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1d747a967e885e8d16192c83b3d61f0bc01df6ed1f3333b231772382d0f7d99","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1d747a967e885e8d16192c83b3d61f0bc01df6ed1f3333b231772382d0f7d99","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:30:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1d747a967e885e8d16192c83b3d61f0bc01df6ed1f3333b231772382d0f7d99"}
{"level":"debug","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65f63c30117c50ae3f0e1181455926eb25cc8a23cd5ff888c100196f6ecd3d75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:30:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:30:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65f63c30117c50ae3f0e1181455926eb25cc8a23cd5ff888c100196f6ecd3d75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65f63c30117c50ae3f0e1181455926eb25cc8a23cd5ff888c100196f6ecd3d75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65f63c30117c50ae3f0e1181455926eb25cc8a23cd5ff888c100196f6ecd3d75","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65f63c30117c50ae3f0e1181455926eb25cc8a23cd5ff888c100196f6ecd3d75"}
{"level":"debug","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65f63c30117c50ae3f0e1181455926eb25cc8a23cd5ff888c100196f6ecd3d75","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65f63c30117c50ae3f0e1181455926eb25cc8a23cd5ff888c100196f6ecd3d75"}
{"level":"debug","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65f63c30117c50ae3f0e1181455926eb25cc8a23cd5ff888c100196f6ecd3d75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:30:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:30:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["65f63c30117c50ae3f0e1181455926eb25cc8a23cd5ff888c100196f6ecd3d75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65f63c30117c50ae3f0e1181455926eb25cc8a23cd5ff888c100196f6ecd3d75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65f63c30117c50ae3f0e1181455926eb25cc8a23cd5ff888c100196f6ecd3d75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:30:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:30:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65f63c30117c50ae3f0e1181455926eb25cc8a23cd5ff888c100196f6ecd3d75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65f63c30117c50ae3f0e1181455926eb25cc8a23cd5ff888c100196f6ecd3d75","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65f63c30117c50ae3f0e1181455926eb25cc8a23cd5ff888c100196f6ecd3d75"}
{"level":"debug","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65f63c30117c50ae3f0e1181455926eb25cc8a23cd5ff888c100196f6ecd3d75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65f63c30117c50ae3f0e1181455926eb25cc8a23cd5ff888c100196f6ecd3d75","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65f63c30117c50ae3f0e1181455926eb25cc8a23cd5ff888c100196f6ecd3d75"}
{"level":"debug","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65f63c30117c50ae3f0e1181455926eb25cc8a23cd5ff888c100196f6ecd3d75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:30:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:30:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["65f63c30117c50ae3f0e1181455926eb25cc8a23cd5ff888c100196f6ecd3d75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65f63c30117c50ae3f0e1181455926eb25cc8a23cd5ff888c100196f6ecd3d75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65f63c30117c50ae3f0e1181455926eb25cc8a23cd5ff888c100196f6ecd3d75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:30:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:30:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65f63c30117c50ae3f0e1181455926eb25cc8a23cd5ff888c100196f6ecd3d75"}
{"level":"info","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65f63c30117c50ae3f0e1181455926eb25cc8a23cd5ff888c100196f6ecd3d75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65f63c30117c50ae3f0e1181455926eb25cc8a23cd5ff888c100196f6ecd3d75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65f63c30117c50ae3f0e1181455926eb25cc8a23cd5ff888c100196f6ecd3d75","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65f63c30117c50ae3f0e1181455926eb25cc8a23cd5ff888c100196f6ecd3d75"}
{"level":"debug","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65f63c30117c50ae3f0e1181455926eb25cc8a23cd5ff888c100196f6ecd3d75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:30:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:30:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["65f63c30117c50ae3f0e1181455926eb25cc8a23cd5ff888c100196f6ecd3d75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65f63c30117c50ae3f0e1181455926eb25cc8a23cd5ff888c100196f6ecd3d75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65f63c30117c50ae3f0e1181455926eb25cc8a23cd5ff888c100196f6ecd3d75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb318eef8e9073aa31b74ffe9fc39d12cc1c6ad9fa0e91d4bca461c1399f6dd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:30:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:30:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65f63c30117c50ae3f0e1181455926eb25cc8a23cd5ff888c100196f6ecd3d75"}
{"level":"info","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb318eef8e9073aa31b74ffe9fc39d12cc1c6ad9fa0e91d4bca461c1399f6dd5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb318eef8e9073aa31b74ffe9fc39d12cc1c6ad9fa0e91d4bca461c1399f6dd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:30:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:30:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb318eef8e9073aa31b74ffe9fc39d12cc1c6ad9fa0e91d4bca461c1399f6dd5"}
{"level":"info","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb318eef8e9073aa31b74ffe9fc39d12cc1c6ad9fa0e91d4bca461c1399f6dd5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb318eef8e9073aa31b74ffe9fc39d12cc1c6ad9fa0e91d4bca461c1399f6dd5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb318eef8e9073aa31b74ffe9fc39d12cc1c6ad9fa0e91d4bca461c1399f6dd5"}
{"level":"debug","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb318eef8e9073aa31b74ffe9fc39d12cc1c6ad9fa0e91d4bca461c1399f6dd5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb318eef8e9073aa31b74ffe9fc39d12cc1c6ad9fa0e91d4bca461c1399f6dd5"}
{"level":"debug","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb318eef8e9073aa31b74ffe9fc39d12cc1c6ad9fa0e91d4bca461c1399f6dd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:30:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:30:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb318eef8e9073aa31b74ffe9fc39d12cc1c6ad9fa0e91d4bca461c1399f6dd5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb318eef8e9073aa31b74ffe9fc39d12cc1c6ad9fa0e91d4bca461c1399f6dd5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb318eef8e9073aa31b74ffe9fc39d12cc1c6ad9fa0e91d4bca461c1399f6dd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:30:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:30:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb318eef8e9073aa31b74ffe9fc39d12cc1c6ad9fa0e91d4bca461c1399f6dd5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb318eef8e9073aa31b74ffe9fc39d12cc1c6ad9fa0e91d4bca461c1399f6dd5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb318eef8e9073aa31b74ffe9fc39d12cc1c6ad9fa0e91d4bca461c1399f6dd5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb318eef8e9073aa31b74ffe9fc39d12cc1c6ad9fa0e91d4bca461c1399f6dd5"}
{"level":"debug","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb318eef8e9073aa31b74ffe9fc39d12cc1c6ad9fa0e91d4bca461c1399f6dd5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb318eef8e9073aa31b74ffe9fc39d12cc1c6ad9fa0e91d4bca461c1399f6dd5"}
{"level":"debug","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb318eef8e9073aa31b74ffe9fc39d12cc1c6ad9fa0e91d4bca461c1399f6dd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:30:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:30:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb318eef8e9073aa31b74ffe9fc39d12cc1c6ad9fa0e91d4bca461c1399f6dd5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb318eef8e9073aa31b74ffe9fc39d12cc1c6ad9fa0e91d4bca461c1399f6dd5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1717a574f65a96ad79a860e82e3367b28131ee9243f509f1ced0d25a5d27e48a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:30:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:30:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1717a574f65a96ad79a860e82e3367b28131ee9243f509f1ced0d25a5d27e48a"}
{"level":"info","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1717a574f65a96ad79a860e82e3367b28131ee9243f509f1ced0d25a5d27e48a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb318eef8e9073aa31b74ffe9fc39d12cc1c6ad9fa0e91d4bca461c1399f6dd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:30:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:30:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb318eef8e9073aa31b74ffe9fc39d12cc1c6ad9fa0e91d4bca461c1399f6dd5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1717a574f65a96ad79a860e82e3367b28131ee9243f509f1ced0d25a5d27e48a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:30:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:30:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1717a574f65a96ad79a860e82e3367b28131ee9243f509f1ced0d25a5d27e48a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb318eef8e9073aa31b74ffe9fc39d12cc1c6ad9fa0e91d4bca461c1399f6dd5"}
{"level":"info","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1717a574f65a96ad79a860e82e3367b28131ee9243f509f1ced0d25a5d27e48a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb318eef8e9073aa31b74ffe9fc39d12cc1c6ad9fa0e91d4bca461c1399f6dd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:30:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:30:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb318eef8e9073aa31b74ffe9fc39d12cc1c6ad9fa0e91d4bca461c1399f6dd5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1717a574f65a96ad79a860e82e3367b28131ee9243f509f1ced0d25a5d27e48a"}
{"level":"info","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb318eef8e9073aa31b74ffe9fc39d12cc1c6ad9fa0e91d4bca461c1399f6dd5"}
{"level":"info","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb318eef8e9073aa31b74ffe9fc39d12cc1c6ad9fa0e91d4bca461c1399f6dd5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1717a574f65a96ad79a860e82e3367b28131ee9243f509f1ced0d25a5d27e48a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:30:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:30:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1717a574f65a96ad79a860e82e3367b28131ee9243f509f1ced0d25a5d27e48a"}
{"level":"info","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb318eef8e9073aa31b74ffe9fc39d12cc1c6ad9fa0e91d4bca461c1399f6dd5"}
{"level":"info","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1717a574f65a96ad79a860e82e3367b28131ee9243f509f1ced0d25a5d27e48a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb318eef8e9073aa31b74ffe9fc39d12cc1c6ad9fa0e91d4bca461c1399f6dd5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1717a574f65a96ad79a860e82e3367b28131ee9243f509f1ced0d25a5d27e48a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1717a574f65a96ad79a860e82e3367b28131ee9243f509f1ced0d25a5d27e48a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1717a574f65a96ad79a860e82e3367b28131ee9243f509f1ced0d25a5d27e48a"}
{"level":"debug","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1717a574f65a96ad79a860e82e3367b28131ee9243f509f1ced0d25a5d27e48a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:30:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:30:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1717a574f65a96ad79a860e82e3367b28131ee9243f509f1ced0d25a5d27e48a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1717a574f65a96ad79a860e82e3367b28131ee9243f509f1ced0d25a5d27e48a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1717a574f65a96ad79a860e82e3367b28131ee9243f509f1ced0d25a5d27e48a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:30:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:30:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1717a574f65a96ad79a860e82e3367b28131ee9243f509f1ced0d25a5d27e48a"}
{"level":"info","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1717a574f65a96ad79a860e82e3367b28131ee9243f509f1ced0d25a5d27e48a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1717a574f65a96ad79a860e82e3367b28131ee9243f509f1ced0d25a5d27e48a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1717a574f65a96ad79a860e82e3367b28131ee9243f509f1ced0d25a5d27e48a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1717a574f65a96ad79a860e82e3367b28131ee9243f509f1ced0d25a5d27e48a"}
{"level":"debug","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1717a574f65a96ad79a860e82e3367b28131ee9243f509f1ced0d25a5d27e48a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:30:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:30:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1717a574f65a96ad79a860e82e3367b28131ee9243f509f1ced0d25a5d27e48a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1717a574f65a96ad79a860e82e3367b28131ee9243f509f1ced0d25a5d27e48a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1717a574f65a96ad79a860e82e3367b28131ee9243f509f1ced0d25a5d27e48a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:30:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:30:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1717a574f65a96ad79a860e82e3367b28131ee9243f509f1ced0d25a5d27e48a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe419deb44410346da352ca0da64ef9747e98011856178a1ed63a4528c57d973","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:30:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:30:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1717a574f65a96ad79a860e82e3367b28131ee9243f509f1ced0d25a5d27e48a"}
{"level":"info","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe419deb44410346da352ca0da64ef9747e98011856178a1ed63a4528c57d973","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1717a574f65a96ad79a860e82e3367b28131ee9243f509f1ced0d25a5d27e48a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:30:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:30:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1717a574f65a96ad79a860e82e3367b28131ee9243f509f1ced0d25a5d27e48a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1717a574f65a96ad79a860e82e3367b28131ee9243f509f1ced0d25a5d27e48a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe419deb44410346da352ca0da64ef9747e98011856178a1ed63a4528c57d973","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:30:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:30:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe419deb44410346da352ca0da64ef9747e98011856178a1ed63a4528c57d973"}
{"level":"info","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe419deb44410346da352ca0da64ef9747e98011856178a1ed63a4528c57d973","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1717a574f65a96ad79a860e82e3367b28131ee9243f509f1ced0d25a5d27e48a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:30:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:30:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1717a574f65a96ad79a860e82e3367b28131ee9243f509f1ced0d25a5d27e48a"}
{"level":"info","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1717a574f65a96ad79a860e82e3367b28131ee9243f509f1ced0d25a5d27e48a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe419deb44410346da352ca0da64ef9747e98011856178a1ed63a4528c57d973","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1717a574f65a96ad79a860e82e3367b28131ee9243f509f1ced0d25a5d27e48a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:30:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:30:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1717a574f65a96ad79a860e82e3367b28131ee9243f509f1ced0d25a5d27e48a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe419deb44410346da352ca0da64ef9747e98011856178a1ed63a4528c57d973"}
{"level":"info","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1717a574f65a96ad79a860e82e3367b28131ee9243f509f1ced0d25a5d27e48a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe419deb44410346da352ca0da64ef9747e98011856178a1ed63a4528c57d973","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:30:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:30:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe419deb44410346da352ca0da64ef9747e98011856178a1ed63a4528c57d973"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1717a574f65a96ad79a860e82e3367b28131ee9243f509f1ced0d25a5d27e48a"}
{"level":"info","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe419deb44410346da352ca0da64ef9747e98011856178a1ed63a4528c57d973","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1717a574f65a96ad79a860e82e3367b28131ee9243f509f1ced0d25a5d27e48a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:30:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:30:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1717a574f65a96ad79a860e82e3367b28131ee9243f509f1ced0d25a5d27e48a"}
{"level":"info","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe419deb44410346da352ca0da64ef9747e98011856178a1ed63a4528c57d973"}
{"level":"info","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1717a574f65a96ad79a860e82e3367b28131ee9243f509f1ced0d25a5d27e48a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe419deb44410346da352ca0da64ef9747e98011856178a1ed63a4528c57d973","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35692854eac2ff75b38f6d6968ae9a7ec0687a8d8619d97820bfe25657ec18c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:30:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:30:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35692854eac2ff75b38f6d6968ae9a7ec0687a8d8619d97820bfe25657ec18c3"}
{"level":"info","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35692854eac2ff75b38f6d6968ae9a7ec0687a8d8619d97820bfe25657ec18c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1717a574f65a96ad79a860e82e3367b28131ee9243f509f1ced0d25a5d27e48a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35692854eac2ff75b38f6d6968ae9a7ec0687a8d8619d97820bfe25657ec18c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:30:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:30:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35692854eac2ff75b38f6d6968ae9a7ec0687a8d8619d97820bfe25657ec18c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1717a574f65a96ad79a860e82e3367b28131ee9243f509f1ced0d25a5d27e48a"}
{"level":"info","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35692854eac2ff75b38f6d6968ae9a7ec0687a8d8619d97820bfe25657ec18c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1717a574f65a96ad79a860e82e3367b28131ee9243f509f1ced0d25a5d27e48a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:30:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:30:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1717a574f65a96ad79a860e82e3367b28131ee9243f509f1ced0d25a5d27e48a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35692854eac2ff75b38f6d6968ae9a7ec0687a8d8619d97820bfe25657ec18c3"}
{"level":"info","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1717a574f65a96ad79a860e82e3367b28131ee9243f509f1ced0d25a5d27e48a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35692854eac2ff75b38f6d6968ae9a7ec0687a8d8619d97820bfe25657ec18c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:30:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:30:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35692854eac2ff75b38f6d6968ae9a7ec0687a8d8619d97820bfe25657ec18c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1717a574f65a96ad79a860e82e3367b28131ee9243f509f1ced0d25a5d27e48a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"603d439d80dc607324d8eb202503e6f08ea9ab30ee7e0dfcf0d37d153f9a6468","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:30:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:30:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35692854eac2ff75b38f6d6968ae9a7ec0687a8d8619d97820bfe25657ec18c3"}
{"level":"info","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"603d439d80dc607324d8eb202503e6f08ea9ab30ee7e0dfcf0d37d153f9a6468","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35692854eac2ff75b38f6d6968ae9a7ec0687a8d8619d97820bfe25657ec18c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:30:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:30:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35692854eac2ff75b38f6d6968ae9a7ec0687a8d8619d97820bfe25657ec18c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1717a574f65a96ad79a860e82e3367b28131ee9243f509f1ced0d25a5d27e48a"}
{"level":"info","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35692854eac2ff75b38f6d6968ae9a7ec0687a8d8619d97820bfe25657ec18c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"603d439d80dc607324d8eb202503e6f08ea9ab30ee7e0dfcf0d37d153f9a6468","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:30:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:30:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/603d439d80dc607324d8eb202503e6f08ea9ab30ee7e0dfcf0d37d153f9a6468"}
{"level":"info","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"603d439d80dc607324d8eb202503e6f08ea9ab30ee7e0dfcf0d37d153f9a6468","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35692854eac2ff75b38f6d6968ae9a7ec0687a8d8619d97820bfe25657ec18c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:30:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:30:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35692854eac2ff75b38f6d6968ae9a7ec0687a8d8619d97820bfe25657ec18c3"}
{"level":"info","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35692854eac2ff75b38f6d6968ae9a7ec0687a8d8619d97820bfe25657ec18c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"603d439d80dc607324d8eb202503e6f08ea9ab30ee7e0dfcf0d37d153f9a6468","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35692854eac2ff75b38f6d6968ae9a7ec0687a8d8619d97820bfe25657ec18c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:30:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:30:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35692854eac2ff75b38f6d6968ae9a7ec0687a8d8619d97820bfe25657ec18c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/603d439d80dc607324d8eb202503e6f08ea9ab30ee7e0dfcf0d37d153f9a6468"}
{"level":"info","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35692854eac2ff75b38f6d6968ae9a7ec0687a8d8619d97820bfe25657ec18c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e5e529d8d0c5476078ae507e6d0a06313f34140b30f155e532197d65dfa65ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:30:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:30:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35692854eac2ff75b38f6d6968ae9a7ec0687a8d8619d97820bfe25657ec18c3"}
{"level":"info","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e5e529d8d0c5476078ae507e6d0a06313f34140b30f155e532197d65dfa65ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"603d439d80dc607324d8eb202503e6f08ea9ab30ee7e0dfcf0d37d153f9a6468","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:30:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:30:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["603d439d80dc607324d8eb202503e6f08ea9ab30ee7e0dfcf0d37d153f9a6468"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e5e529d8d0c5476078ae507e6d0a06313f34140b30f155e532197d65dfa65ec"}
{"level":"info","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"603d439d80dc607324d8eb202503e6f08ea9ab30ee7e0dfcf0d37d153f9a6468","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35692854eac2ff75b38f6d6968ae9a7ec0687a8d8619d97820bfe25657ec18c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:30:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:30:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35692854eac2ff75b38f6d6968ae9a7ec0687a8d8619d97820bfe25657ec18c3"}
{"level":"info","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35692854eac2ff75b38f6d6968ae9a7ec0687a8d8619d97820bfe25657ec18c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"108a645fe6f65a638598eac8011398ab2ab0c1a850b15428a600b47382a8e07f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:30:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:30:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/108a645fe6f65a638598eac8011398ab2ab0c1a850b15428a600b47382a8e07f"}
{"level":"info","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"108a645fe6f65a638598eac8011398ab2ab0c1a850b15428a600b47382a8e07f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e5e529d8d0c5476078ae507e6d0a06313f34140b30f155e532197d65dfa65ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:30:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:30:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e5e529d8d0c5476078ae507e6d0a06313f34140b30f155e532197d65dfa65ec"}
{"level":"info","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e5e529d8d0c5476078ae507e6d0a06313f34140b30f155e532197d65dfa65ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"603d439d80dc607324d8eb202503e6f08ea9ab30ee7e0dfcf0d37d153f9a6468","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:30:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:30:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/603d439d80dc607324d8eb202503e6f08ea9ab30ee7e0dfcf0d37d153f9a6468"}
{"level":"info","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"603d439d80dc607324d8eb202503e6f08ea9ab30ee7e0dfcf0d37d153f9a6468","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35692854eac2ff75b38f6d6968ae9a7ec0687a8d8619d97820bfe25657ec18c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"108a645fe6f65a638598eac8011398ab2ab0c1a850b15428a600b47382a8e07f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:30:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:30:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["108a645fe6f65a638598eac8011398ab2ab0c1a850b15428a600b47382a8e07f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35692854eac2ff75b38f6d6968ae9a7ec0687a8d8619d97820bfe25657ec18c3"}
{"level":"info","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"108a645fe6f65a638598eac8011398ab2ab0c1a850b15428a600b47382a8e07f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9c182abb05589fdaa6e7edcd0ea6244e050db80029590e554912f7cd441591f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:30:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:30:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/108a645fe6f65a638598eac8011398ab2ab0c1a850b15428a600b47382a8e07f"}
{"level":"info","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9c182abb05589fdaa6e7edcd0ea6244e050db80029590e554912f7cd441591f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e5e529d8d0c5476078ae507e6d0a06313f34140b30f155e532197d65dfa65ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:30:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:30:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e5e529d8d0c5476078ae507e6d0a06313f34140b30f155e532197d65dfa65ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9c182abb05589fdaa6e7edcd0ea6244e050db80029590e554912f7cd441591f"}
{"level":"info","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e5e529d8d0c5476078ae507e6d0a06313f34140b30f155e532197d65dfa65ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"603d439d80dc607324d8eb202503e6f08ea9ab30ee7e0dfcf0d37d153f9a6468","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:30:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:30:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["603d439d80dc607324d8eb202503e6f08ea9ab30ee7e0dfcf0d37d153f9a6468"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e5e529d8d0c5476078ae507e6d0a06313f34140b30f155e532197d65dfa65ec"}
{"level":"info","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"603d439d80dc607324d8eb202503e6f08ea9ab30ee7e0dfcf0d37d153f9a6468","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35692854eac2ff75b38f6d6968ae9a7ec0687a8d8619d97820bfe25657ec18c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:30:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:30:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35692854eac2ff75b38f6d6968ae9a7ec0687a8d8619d97820bfe25657ec18c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35692854eac2ff75b38f6d6968ae9a7ec0687a8d8619d97820bfe25657ec18c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"108a645fe6f65a638598eac8011398ab2ab0c1a850b15428a600b47382a8e07f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9c182abb05589fdaa6e7edcd0ea6244e050db80029590e554912f7cd441591f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:30:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:30:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9c182abb05589fdaa6e7edcd0ea6244e050db80029590e554912f7cd441591f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/603d439d80dc607324d8eb202503e6f08ea9ab30ee7e0dfcf0d37d153f9a6468"}
{"level":"info","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9c182abb05589fdaa6e7edcd0ea6244e050db80029590e554912f7cd441591f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e5e529d8d0c5476078ae507e6d0a06313f34140b30f155e532197d65dfa65ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"341df337fdb6c76c4667771ef7ebc010ac902630d235c1f08796b3a0ae031283","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:30:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:30:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/108a645fe6f65a638598eac8011398ab2ab0c1a850b15428a600b47382a8e07f"}
{"level":"info","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"341df337fdb6c76c4667771ef7ebc010ac902630d235c1f08796b3a0ae031283","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"603d439d80dc607324d8eb202503e6f08ea9ab30ee7e0dfcf0d37d153f9a6468","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35692854eac2ff75b38f6d6968ae9a7ec0687a8d8619d97820bfe25657ec18c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9c182abb05589fdaa6e7edcd0ea6244e050db80029590e554912f7cd441591f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:30:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:30:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9c182abb05589fdaa6e7edcd0ea6244e050db80029590e554912f7cd441591f"}
{"level":"info","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9c182abb05589fdaa6e7edcd0ea6244e050db80029590e554912f7cd441591f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"341df337fdb6c76c4667771ef7ebc010ac902630d235c1f08796b3a0ae031283","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:30:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:30:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/341df337fdb6c76c4667771ef7ebc010ac902630d235c1f08796b3a0ae031283"}
{"level":"info","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"341df337fdb6c76c4667771ef7ebc010ac902630d235c1f08796b3a0ae031283","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9c182abb05589fdaa6e7edcd0ea6244e050db80029590e554912f7cd441591f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:30:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:30:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9c182abb05589fdaa6e7edcd0ea6244e050db80029590e554912f7cd441591f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9c182abb05589fdaa6e7edcd0ea6244e050db80029590e554912f7cd441591f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"341df337fdb6c76c4667771ef7ebc010ac902630d235c1f08796b3a0ae031283","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:30:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:30:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["341df337fdb6c76c4667771ef7ebc010ac902630d235c1f08796b3a0ae031283"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e5e529d8d0c5476078ae507e6d0a06313f34140b30f155e532197d65dfa65ec"}
{"level":"info","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"341df337fdb6c76c4667771ef7ebc010ac902630d235c1f08796b3a0ae031283","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9c182abb05589fdaa6e7edcd0ea6244e050db80029590e554912f7cd441591f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"341df337fdb6c76c4667771ef7ebc010ac902630d235c1f08796b3a0ae031283","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35692854eac2ff75b38f6d6968ae9a7ec0687a8d8619d97820bfe25657ec18c3"}
{"level":"info","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/603d439d80dc607324d8eb202503e6f08ea9ab30ee7e0dfcf0d37d153f9a6468"}
{"level":"info","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9c182abb05589fdaa6e7edcd0ea6244e050db80029590e554912f7cd441591f"}
{"level":"info","ts":"2026-07-07T18:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/341df337fdb6c76c4667771ef7ebc010ac902630d235c1f08796b3a0ae031283"}
{"level":"info","ts":"2026-07-07T18:30:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4587e7a3-e440-4fc3-be68-b4394885ed81","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:39494","PortSpecifier":{"PortValue":39494}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4587e7a3-e440-4fc3-be68-b4394885ed81","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2b5160.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:30:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4587e7a3-e440-4fc3-be68-b4394885ed81","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:39494","PortSpecifier":{"PortValue":39494}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783449057,"nanos":66423507},"http":{"id":"4587e7a3-e440-4fc3-be68-b4394885ed81","method":"POST","headers":{":authority":"e2e-shared-a-2b5160.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:30:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4587e7a3-e440-4fc3-be68-b4394885ed81","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T18:30:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4587e7a3-e440-4fc3-be68-b4394885ed81","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"13165771-7ad0-4fee-91b3-c3ee0a976429","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d354d02-b562-46f4-8cbc-cd983e35664b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/67bf82c58916"]}}
{"level":"debug","ts":"2026-07-07T18:30:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4587e7a3-e440-4fc3-be68-b4394885ed81","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/67bf82c58916"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d354d02-b562-46f4-8cbc-cd983e35664b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"13165771-7ad0-4fee-91b3-c3ee0a976429","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6c7d4e41ddb1bd416f2d5908a7bb8464816d48c020133e80633d04485d41709e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2b5160.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:30:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4587e7a3-e440-4fc3-be68-b4394885ed81","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:30:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4587e7a3-e440-4fc3-be68-b4394885ed81","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:30:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4587e7a3-e440-4fc3-be68-b4394885ed81","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2b5160/auth-test-model-2b5160\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:30:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4587e7a3-e440-4fc3-be68-b4394885ed81","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T18:30:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4587e7a3-e440-4fc3-be68-b4394885ed81","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T18:30:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4587e7a3-e440-4fc3-be68-b4394885ed81","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T18:30:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4587e7a3-e440-4fc3-be68-b4394885ed81","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:30:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4587e7a3-e440-4fc3-be68-b4394885ed81","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:30:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ffb6611-902a-4310-a0cd-3b992f9365cf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:49694","PortSpecifier":{"PortValue":49694}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8ffb6611-902a-4310-a0cd-3b992f9365cf","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-200b05.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:30:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ffb6611-902a-4310-a0cd-3b992f9365cf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:49694","PortSpecifier":{"PortValue":49694}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783449057,"nanos":126857855},"http":{"id":"8ffb6611-902a-4310-a0cd-3b992f9365cf","method":"POST","headers":{":authority":"e2e-shared-b-200b05.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:30:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8ffb6611-902a-4310-a0cd-3b992f9365cf","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T18:30:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8ffb6611-902a-4310-a0cd-3b992f9365cf","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"13165771-7ad0-4fee-91b3-c3ee0a976429","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d354d02-b562-46f4-8cbc-cd983e35664b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/67bf82c58916"]}}
{"level":"debug","ts":"2026-07-07T18:30:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8ffb6611-902a-4310-a0cd-3b992f9365cf","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/67bf82c58916"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d354d02-b562-46f4-8cbc-cd983e35664b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"13165771-7ad0-4fee-91b3-c3ee0a976429","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a9c182abb05589fdaa6e7edcd0ea6244e050db80029590e554912f7cd441591f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-200b05.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:30:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ffb6611-902a-4310-a0cd-3b992f9365cf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:30:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ffb6611-902a-4310-a0cd-3b992f9365cf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:30:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ffb6611-902a-4310-a0cd-3b992f9365cf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-200b05/auth-test-model-200b05\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:30:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8ffb6611-902a-4310-a0cd-3b992f9365cf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T18:30:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ffb6611-902a-4310-a0cd-3b992f9365cf","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T18:30:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ffb6611-902a-4310-a0cd-3b992f9365cf","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T18:30:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ffb6611-902a-4310-a0cd-3b992f9365cf","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:30:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ffb6611-902a-4310-a0cd-3b992f9365cf","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:30:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f54ba85c-7234-423d-83ba-5a68e6943d3a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:39500","PortSpecifier":{"PortValue":39500}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f54ba85c-7234-423d-83ba-5a68e6943d3a","method":"GET","path":"/maas-api/v1/api-keys/0b3d3867-e487-4ebd-bd46-6243446fbd5f","host":"e2e-shared-a-2b5160.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:30:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f54ba85c-7234-423d-83ba-5a68e6943d3a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:39500","PortSpecifier":{"PortValue":39500}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783449057,"nanos":219471114},"http":{"id":"f54ba85c-7234-423d-83ba-5a68e6943d3a","method":"GET","headers":{":authority":"e2e-shared-a-2b5160.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/0b3d3867-e487-4ebd-bd46-6243446fbd5f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:30:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f54ba85c-7234-423d-83ba-5a68e6943d3a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T18:30:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f54ba85c-7234-423d-83ba-5a68e6943d3a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"13165771-7ad0-4fee-91b3-c3ee0a976429","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d354d02-b562-46f4-8cbc-cd983e35664b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/67bf82c58916"]}}
{"level":"debug","ts":"2026-07-07T18:30:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f54ba85c-7234-423d-83ba-5a68e6943d3a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/67bf82c58916"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d354d02-b562-46f4-8cbc-cd983e35664b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"13165771-7ad0-4fee-91b3-c3ee0a976429","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6c7d4e41ddb1bd416f2d5908a7bb8464816d48c020133e80633d04485d41709e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2b5160.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/0b3d3867-e487-4ebd-bd46-6243446fbd5f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:30:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f54ba85c-7234-423d-83ba-5a68e6943d3a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:30:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f54ba85c-7234-423d-83ba-5a68e6943d3a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:30:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f54ba85c-7234-423d-83ba-5a68e6943d3a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2b5160/auth-test-model-2b5160\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:30:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f54ba85c-7234-423d-83ba-5a68e6943d3a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T18:30:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f54ba85c-7234-423d-83ba-5a68e6943d3a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T18:30:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f54ba85c-7234-423d-83ba-5a68e6943d3a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T18:30:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f54ba85c-7234-423d-83ba-5a68e6943d3a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:30:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f54ba85c-7234-423d-83ba-5a68e6943d3a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:30:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c4976d89-f849-4944-837b-e662ff510e5c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:49696","PortSpecifier":{"PortValue":49696}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c4976d89-f849-4944-837b-e662ff510e5c","method":"GET","path":"/maas-api/v1/api-keys/beece649-d263-4e2d-993c-5e48780c0986","host":"e2e-shared-b-200b05.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:30:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c4976d89-f849-4944-837b-e662ff510e5c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:49696","PortSpecifier":{"PortValue":49696}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783449057,"nanos":268464213},"http":{"id":"c4976d89-f849-4944-837b-e662ff510e5c","method":"GET","headers":{":authority":"e2e-shared-b-200b05.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/beece649-d263-4e2d-993c-5e48780c0986",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:30:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c4976d89-f849-4944-837b-e662ff510e5c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T18:30:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c4976d89-f849-4944-837b-e662ff510e5c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"13165771-7ad0-4fee-91b3-c3ee0a976429","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d354d02-b562-46f4-8cbc-cd983e35664b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/67bf82c58916"]}}
{"level":"debug","ts":"2026-07-07T18:30:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c4976d89-f849-4944-837b-e662ff510e5c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/67bf82c58916"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d354d02-b562-46f4-8cbc-cd983e35664b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"13165771-7ad0-4fee-91b3-c3ee0a976429","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a9c182abb05589fdaa6e7edcd0ea6244e050db80029590e554912f7cd441591f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-200b05.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/beece649-d263-4e2d-993c-5e48780c0986",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:30:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4976d89-f849-4944-837b-e662ff510e5c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:30:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4976d89-f849-4944-837b-e662ff510e5c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:30:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4976d89-f849-4944-837b-e662ff510e5c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-200b05/auth-test-model-200b05\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:30:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c4976d89-f849-4944-837b-e662ff510e5c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T18:30:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c4976d89-f849-4944-837b-e662ff510e5c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T18:30:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c4976d89-f849-4944-837b-e662ff510e5c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T18:30:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c4976d89-f849-4944-837b-e662ff510e5c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:30:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c4976d89-f849-4944-837b-e662ff510e5c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:31:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9648757c-a198-46d3-aa66-2659c3aa1e29","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:56420","PortSpecifier":{"PortValue":56420}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9648757c-a198-46d3-aa66-2659c3aa1e29","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2b5160.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:31:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9648757c-a198-46d3-aa66-2659c3aa1e29","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:56420","PortSpecifier":{"PortValue":56420}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783449072,"nanos":496520165},"http":{"id":"9648757c-a198-46d3-aa66-2659c3aa1e29","method":"POST","headers":{":authority":"e2e-shared-a-2b5160.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:31:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9648757c-a198-46d3-aa66-2659c3aa1e29","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T18:31:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9648757c-a198-46d3-aa66-2659c3aa1e29","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"13165771-7ad0-4fee-91b3-c3ee0a976429","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d354d02-b562-46f4-8cbc-cd983e35664b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/67bf82c58916"]}}
{"level":"debug","ts":"2026-07-07T18:31:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9648757c-a198-46d3-aa66-2659c3aa1e29","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/67bf82c58916"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d354d02-b562-46f4-8cbc-cd983e35664b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"13165771-7ad0-4fee-91b3-c3ee0a976429","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6c7d4e41ddb1bd416f2d5908a7bb8464816d48c020133e80633d04485d41709e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2b5160.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:31:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9648757c-a198-46d3-aa66-2659c3aa1e29","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:31:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9648757c-a198-46d3-aa66-2659c3aa1e29","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:31:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9648757c-a198-46d3-aa66-2659c3aa1e29","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2b5160/auth-test-model-2b5160\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:31:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9648757c-a198-46d3-aa66-2659c3aa1e29","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T18:31:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9648757c-a198-46d3-aa66-2659c3aa1e29","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T18:31:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9648757c-a198-46d3-aa66-2659c3aa1e29","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T18:31:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9648757c-a198-46d3-aa66-2659c3aa1e29","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:31:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9648757c-a198-46d3-aa66-2659c3aa1e29","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:31:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"35f6ae4e-8979-4aca-af6c-3a1ca2612686","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:43992","PortSpecifier":{"PortValue":43992}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"35f6ae4e-8979-4aca-af6c-3a1ca2612686","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-200b05.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:31:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"35f6ae4e-8979-4aca-af6c-3a1ca2612686","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:43992","PortSpecifier":{"PortValue":43992}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783449072,"nanos":533145369},"http":{"id":"35f6ae4e-8979-4aca-af6c-3a1ca2612686","method":"POST","headers":{":authority":"e2e-shared-b-200b05.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:31:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"35f6ae4e-8979-4aca-af6c-3a1ca2612686","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T18:31:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"35f6ae4e-8979-4aca-af6c-3a1ca2612686","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"13165771-7ad0-4fee-91b3-c3ee0a976429","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d354d02-b562-46f4-8cbc-cd983e35664b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/67bf82c58916"]}}
{"level":"debug","ts":"2026-07-07T18:31:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"35f6ae4e-8979-4aca-af6c-3a1ca2612686","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/67bf82c58916"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d354d02-b562-46f4-8cbc-cd983e35664b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"13165771-7ad0-4fee-91b3-c3ee0a976429","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a9c182abb05589fdaa6e7edcd0ea6244e050db80029590e554912f7cd441591f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-200b05.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:31:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"35f6ae4e-8979-4aca-af6c-3a1ca2612686","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:31:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"35f6ae4e-8979-4aca-af6c-3a1ca2612686","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:31:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"35f6ae4e-8979-4aca-af6c-3a1ca2612686","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-200b05/auth-test-model-200b05\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:31:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"35f6ae4e-8979-4aca-af6c-3a1ca2612686","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T18:31:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"35f6ae4e-8979-4aca-af6c-3a1ca2612686","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T18:31:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"35f6ae4e-8979-4aca-af6c-3a1ca2612686","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T18:31:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"35f6ae4e-8979-4aca-af6c-3a1ca2612686","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:31:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"35f6ae4e-8979-4aca-af6c-3a1ca2612686","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:31:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b222d66b-80b0-4871-b50d-1cb3f7021135","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:56422","PortSpecifier":{"PortValue":56422}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b222d66b-80b0-4871-b50d-1cb3f7021135","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-2b5160.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:31:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b222d66b-80b0-4871-b50d-1cb3f7021135","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:56422","PortSpecifier":{"PortValue":56422}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783449072,"nanos":574796930},"http":{"id":"b222d66b-80b0-4871-b50d-1cb3f7021135","method":"GET","headers":{":authority":"e2e-shared-a-2b5160.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:31:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b222d66b-80b0-4871-b50d-1cb3f7021135","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-J46U1YyXC8GrRtVI_R9k3IkI69TGQyFdLcABuJewZheSbZaV6vchCk050XYx"}
{"level":"debug","ts":"2026-07-07T18:31:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b222d66b-80b0-4871-b50d-1cb3f7021135","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2b5160.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-J46U1YyXC8GrRtVI_R9k3IkI69TGQyFdLcABuJewZheSbZaV6vchCk050XYx\"}"}
{"level":"debug","ts":"2026-07-07T18:31:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b222d66b-80b0-4871-b50d-1cb3f7021135","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2b5160.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1078c406-f311-4068-9369-e0df328744fd","keyName":"e2e-auth-iso-a-116a2f","subscription":"e2e-auth-iso-6e4612","tenant":"e2e-shared-a-2b5160","userId":"1078c406-f311-4068-9369-e0df328744fd","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T18:31:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b222d66b-80b0-4871-b50d-1cb3f7021135","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:31:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b222d66b-80b0-4871-b50d-1cb3f7021135","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:31:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b222d66b-80b0-4871-b50d-1cb3f7021135","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:31:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b222d66b-80b0-4871-b50d-1cb3f7021135","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2b5160/auth-test-model-2b5160\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:31:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b222d66b-80b0-4871-b50d-1cb3f7021135","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T18:31:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b222d66b-80b0-4871-b50d-1cb3f7021135","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T18:31:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b222d66b-80b0-4871-b50d-1cb3f7021135","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-6e4612"}
{"level":"debug","ts":"2026-07-07T18:31:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b222d66b-80b0-4871-b50d-1cb3f7021135","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T18:31:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b222d66b-80b0-4871-b50d-1cb3f7021135","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:31:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b222d66b-80b0-4871-b50d-1cb3f7021135","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:31:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dd86578d-6f7b-45d4-aeb1-2c47ab793f65","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:44890","PortSpecifier":{"PortValue":44890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dd86578d-6f7b-45d4-aeb1-2c47ab793f65","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2b5160.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:31:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dd86578d-6f7b-45d4-aeb1-2c47ab793f65","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:44890","PortSpecifier":{"PortValue":44890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783449089,"nanos":921459585},"http":{"id":"dd86578d-6f7b-45d4-aeb1-2c47ab793f65","method":"POST","headers":{":authority":"e2e-shared-a-2b5160.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:31:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"dd86578d-6f7b-45d4-aeb1-2c47ab793f65","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T18:31:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dd86578d-6f7b-45d4-aeb1-2c47ab793f65","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"13165771-7ad0-4fee-91b3-c3ee0a976429","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d354d02-b562-46f4-8cbc-cd983e35664b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/67bf82c58916"]}}
{"level":"debug","ts":"2026-07-07T18:31:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dd86578d-6f7b-45d4-aeb1-2c47ab793f65","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/67bf82c58916"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d354d02-b562-46f4-8cbc-cd983e35664b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"13165771-7ad0-4fee-91b3-c3ee0a976429","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6c7d4e41ddb1bd416f2d5908a7bb8464816d48c020133e80633d04485d41709e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2b5160.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:31:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd86578d-6f7b-45d4-aeb1-2c47ab793f65","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:31:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd86578d-6f7b-45d4-aeb1-2c47ab793f65","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:31:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd86578d-6f7b-45d4-aeb1-2c47ab793f65","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2b5160/auth-test-model-2b5160\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:31:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dd86578d-6f7b-45d4-aeb1-2c47ab793f65","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T18:31:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dd86578d-6f7b-45d4-aeb1-2c47ab793f65","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T18:31:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dd86578d-6f7b-45d4-aeb1-2c47ab793f65","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T18:31:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dd86578d-6f7b-45d4-aeb1-2c47ab793f65","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:31:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dd86578d-6f7b-45d4-aeb1-2c47ab793f65","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:31:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fe4f273f-1158-4997-9fb9-a2d0439e068b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:39752","PortSpecifier":{"PortValue":39752}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fe4f273f-1158-4997-9fb9-a2d0439e068b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-200b05.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:31:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fe4f273f-1158-4997-9fb9-a2d0439e068b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:39752","PortSpecifier":{"PortValue":39752}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783449089,"nanos":963391037},"http":{"id":"fe4f273f-1158-4997-9fb9-a2d0439e068b","method":"POST","headers":{":authority":"e2e-shared-b-200b05.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:31:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fe4f273f-1158-4997-9fb9-a2d0439e068b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T18:31:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fe4f273f-1158-4997-9fb9-a2d0439e068b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"13165771-7ad0-4fee-91b3-c3ee0a976429","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d354d02-b562-46f4-8cbc-cd983e35664b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/67bf82c58916"]}}
{"level":"debug","ts":"2026-07-07T18:31:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fe4f273f-1158-4997-9fb9-a2d0439e068b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/67bf82c58916"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d354d02-b562-46f4-8cbc-cd983e35664b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"13165771-7ad0-4fee-91b3-c3ee0a976429","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a9c182abb05589fdaa6e7edcd0ea6244e050db80029590e554912f7cd441591f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-200b05.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:31:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe4f273f-1158-4997-9fb9-a2d0439e068b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:31:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe4f273f-1158-4997-9fb9-a2d0439e068b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:31:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe4f273f-1158-4997-9fb9-a2d0439e068b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-200b05/auth-test-model-200b05\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:31:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fe4f273f-1158-4997-9fb9-a2d0439e068b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T18:31:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe4f273f-1158-4997-9fb9-a2d0439e068b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T18:31:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe4f273f-1158-4997-9fb9-a2d0439e068b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T18:31:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fe4f273f-1158-4997-9fb9-a2d0439e068b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:31:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fe4f273f-1158-4997-9fb9-a2d0439e068b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:31:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f031a272-097e-427b-82cb-359cb8b16e91","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:39764","PortSpecifier":{"PortValue":39764}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f031a272-097e-427b-82cb-359cb8b16e91","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-200b05.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:31:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f031a272-097e-427b-82cb-359cb8b16e91","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:39764","PortSpecifier":{"PortValue":39764}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783449090,"nanos":4036535},"http":{"id":"f031a272-097e-427b-82cb-359cb8b16e91","method":"GET","headers":{":authority":"e2e-shared-b-200b05.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:31:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f031a272-097e-427b-82cb-359cb8b16e91","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-UBUGSbxpP8hKk55i_6ozqffaeJUMp0Uf9IMe4vJmOqPIn9NBIJmeeihvPiev"}
{"level":"debug","ts":"2026-07-07T18:31:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f031a272-097e-427b-82cb-359cb8b16e91","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-200b05.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-UBUGSbxpP8hKk55i_6ozqffaeJUMp0Uf9IMe4vJmOqPIn9NBIJmeeihvPiev\"}"}
{"level":"debug","ts":"2026-07-07T18:31:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f031a272-097e-427b-82cb-359cb8b16e91","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-200b05.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-07T18:31:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f031a272-097e-427b-82cb-359cb8b16e91","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"a9c182abb05589fdaa6e7edcd0ea6244e050db80029590e554912f7cd441591f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-200b05.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:31:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f031a272-097e-427b-82cb-359cb8b16e91","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:31:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"f031a272-097e-427b-82cb-359cb8b16e91","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-07T18:31:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f031a272-097e-427b-82cb-359cb8b16e91","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-07T18:31:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f031a272-097e-427b-82cb-359cb8b16e91","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-07T18:31:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"373f65ab-4a83-4bdf-b832-3fcedacba4b3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:58394","PortSpecifier":{"PortValue":58394}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"373f65ab-4a83-4bdf-b832-3fcedacba4b3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2b5160.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:31:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"373f65ab-4a83-4bdf-b832-3fcedacba4b3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:58394","PortSpecifier":{"PortValue":58394}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783449107,"nanos":276841530},"http":{"id":"373f65ab-4a83-4bdf-b832-3fcedacba4b3","method":"POST","headers":{":authority":"e2e-shared-a-2b5160.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:31:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"373f65ab-4a83-4bdf-b832-3fcedacba4b3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T18:31:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"373f65ab-4a83-4bdf-b832-3fcedacba4b3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"13165771-7ad0-4fee-91b3-c3ee0a976429","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d354d02-b562-46f4-8cbc-cd983e35664b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/67bf82c58916"]}}
{"level":"debug","ts":"2026-07-07T18:31:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"373f65ab-4a83-4bdf-b832-3fcedacba4b3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/67bf82c58916"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d354d02-b562-46f4-8cbc-cd983e35664b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"13165771-7ad0-4fee-91b3-c3ee0a976429","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6c7d4e41ddb1bd416f2d5908a7bb8464816d48c020133e80633d04485d41709e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2b5160.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:31:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"373f65ab-4a83-4bdf-b832-3fcedacba4b3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:31:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"373f65ab-4a83-4bdf-b832-3fcedacba4b3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:31:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"373f65ab-4a83-4bdf-b832-3fcedacba4b3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2b5160/auth-test-model-2b5160\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:31:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"373f65ab-4a83-4bdf-b832-3fcedacba4b3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T18:31:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"373f65ab-4a83-4bdf-b832-3fcedacba4b3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T18:31:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"373f65ab-4a83-4bdf-b832-3fcedacba4b3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T18:31:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"373f65ab-4a83-4bdf-b832-3fcedacba4b3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:31:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"373f65ab-4a83-4bdf-b832-3fcedacba4b3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:31:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f487fece-2af9-454f-a848-e17ac0c77fa0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:39156","PortSpecifier":{"PortValue":39156}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f487fece-2af9-454f-a848-e17ac0c77fa0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-200b05.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:31:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f487fece-2af9-454f-a848-e17ac0c77fa0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:39156","PortSpecifier":{"PortValue":39156}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783449107,"nanos":318131844},"http":{"id":"f487fece-2af9-454f-a848-e17ac0c77fa0","method":"POST","headers":{":authority":"e2e-shared-b-200b05.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:31:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f487fece-2af9-454f-a848-e17ac0c77fa0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T18:31:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f487fece-2af9-454f-a848-e17ac0c77fa0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"13165771-7ad0-4fee-91b3-c3ee0a976429","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d354d02-b562-46f4-8cbc-cd983e35664b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/67bf82c58916"]}}
{"level":"debug","ts":"2026-07-07T18:31:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f487fece-2af9-454f-a848-e17ac0c77fa0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/67bf82c58916"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d354d02-b562-46f4-8cbc-cd983e35664b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"13165771-7ad0-4fee-91b3-c3ee0a976429","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a9c182abb05589fdaa6e7edcd0ea6244e050db80029590e554912f7cd441591f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-200b05.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:31:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f487fece-2af9-454f-a848-e17ac0c77fa0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:31:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f487fece-2af9-454f-a848-e17ac0c77fa0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:31:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f487fece-2af9-454f-a848-e17ac0c77fa0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-200b05/auth-test-model-200b05\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:31:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f487fece-2af9-454f-a848-e17ac0c77fa0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T18:31:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f487fece-2af9-454f-a848-e17ac0c77fa0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T18:31:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f487fece-2af9-454f-a848-e17ac0c77fa0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T18:31:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f487fece-2af9-454f-a848-e17ac0c77fa0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:31:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f487fece-2af9-454f-a848-e17ac0c77fa0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:31:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"40625717-d838-4e37-9e3b-9d22f60873b8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:58410","PortSpecifier":{"PortValue":58410}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"40625717-d838-4e37-9e3b-9d22f60873b8","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-2b5160.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:31:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"40625717-d838-4e37-9e3b-9d22f60873b8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:58410","PortSpecifier":{"PortValue":58410}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783449107,"nanos":373809351},"http":{"id":"40625717-d838-4e37-9e3b-9d22f60873b8","method":"POST","headers":{":authority":"e2e-shared-a-2b5160.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:31:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"40625717-d838-4e37-9e3b-9d22f60873b8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T18:31:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"40625717-d838-4e37-9e3b-9d22f60873b8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"13165771-7ad0-4fee-91b3-c3ee0a976429","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d354d02-b562-46f4-8cbc-cd983e35664b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/67bf82c58916"]}}
{"level":"debug","ts":"2026-07-07T18:31:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"40625717-d838-4e37-9e3b-9d22f60873b8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/67bf82c58916"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d354d02-b562-46f4-8cbc-cd983e35664b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"13165771-7ad0-4fee-91b3-c3ee0a976429","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6c7d4e41ddb1bd416f2d5908a7bb8464816d48c020133e80633d04485d41709e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2b5160.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:31:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40625717-d838-4e37-9e3b-9d22f60873b8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:31:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40625717-d838-4e37-9e3b-9d22f60873b8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:31:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40625717-d838-4e37-9e3b-9d22f60873b8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2b5160/auth-test-model-2b5160\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:31:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"40625717-d838-4e37-9e3b-9d22f60873b8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T18:31:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40625717-d838-4e37-9e3b-9d22f60873b8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T18:31:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40625717-d838-4e37-9e3b-9d22f60873b8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T18:31:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"40625717-d838-4e37-9e3b-9d22f60873b8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:31:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"40625717-d838-4e37-9e3b-9d22f60873b8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:31:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8b403d2a-64b9-4bf4-b435-278e9f9ab949","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:39166","PortSpecifier":{"PortValue":39166}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8b403d2a-64b9-4bf4-b435-278e9f9ab949","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-200b05.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:31:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8b403d2a-64b9-4bf4-b435-278e9f9ab949","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:39166","PortSpecifier":{"PortValue":39166}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783449107,"nanos":414536016},"http":{"id":"8b403d2a-64b9-4bf4-b435-278e9f9ab949","method":"POST","headers":{":authority":"e2e-shared-b-200b05.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:31:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8b403d2a-64b9-4bf4-b435-278e9f9ab949","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T18:31:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8b403d2a-64b9-4bf4-b435-278e9f9ab949","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"13165771-7ad0-4fee-91b3-c3ee0a976429","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d354d02-b562-46f4-8cbc-cd983e35664b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/67bf82c58916"]}}
{"level":"debug","ts":"2026-07-07T18:31:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8b403d2a-64b9-4bf4-b435-278e9f9ab949","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/67bf82c58916"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d354d02-b562-46f4-8cbc-cd983e35664b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"13165771-7ad0-4fee-91b3-c3ee0a976429","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a9c182abb05589fdaa6e7edcd0ea6244e050db80029590e554912f7cd441591f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-200b05.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:31:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b403d2a-64b9-4bf4-b435-278e9f9ab949","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:31:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b403d2a-64b9-4bf4-b435-278e9f9ab949","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:31:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b403d2a-64b9-4bf4-b435-278e9f9ab949","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-200b05/auth-test-model-200b05\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:31:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8b403d2a-64b9-4bf4-b435-278e9f9ab949","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T18:31:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b403d2a-64b9-4bf4-b435-278e9f9ab949","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T18:31:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b403d2a-64b9-4bf4-b435-278e9f9ab949","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T18:31:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8b403d2a-64b9-4bf4-b435-278e9f9ab949","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:31:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8b403d2a-64b9-4bf4-b435-278e9f9ab949","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:32:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"91e7219c-5f69-4592-bfeb-3c52636a2e9f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:39010","PortSpecifier":{"PortValue":39010}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"91e7219c-5f69-4592-bfeb-3c52636a2e9f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2b5160.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:32:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"91e7219c-5f69-4592-bfeb-3c52636a2e9f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:39010","PortSpecifier":{"PortValue":39010}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783449124,"nanos":706013495},"http":{"id":"91e7219c-5f69-4592-bfeb-3c52636a2e9f","method":"POST","headers":{":authority":"e2e-shared-a-2b5160.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:32:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"91e7219c-5f69-4592-bfeb-3c52636a2e9f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T18:32:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"91e7219c-5f69-4592-bfeb-3c52636a2e9f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"13165771-7ad0-4fee-91b3-c3ee0a976429","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d354d02-b562-46f4-8cbc-cd983e35664b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/67bf82c58916"]}}
{"level":"debug","ts":"2026-07-07T18:32:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"91e7219c-5f69-4592-bfeb-3c52636a2e9f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/67bf82c58916"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d354d02-b562-46f4-8cbc-cd983e35664b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"13165771-7ad0-4fee-91b3-c3ee0a976429","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6c7d4e41ddb1bd416f2d5908a7bb8464816d48c020133e80633d04485d41709e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2b5160.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:32:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"91e7219c-5f69-4592-bfeb-3c52636a2e9f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:32:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"91e7219c-5f69-4592-bfeb-3c52636a2e9f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:32:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"91e7219c-5f69-4592-bfeb-3c52636a2e9f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2b5160/auth-test-model-2b5160\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:32:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"91e7219c-5f69-4592-bfeb-3c52636a2e9f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T18:32:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"91e7219c-5f69-4592-bfeb-3c52636a2e9f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T18:32:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"91e7219c-5f69-4592-bfeb-3c52636a2e9f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T18:32:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"91e7219c-5f69-4592-bfeb-3c52636a2e9f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:32:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"91e7219c-5f69-4592-bfeb-3c52636a2e9f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:32:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ecc01c88-4114-4a42-8fcd-28a151b0f183","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:46376","PortSpecifier":{"PortValue":46376}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ecc01c88-4114-4a42-8fcd-28a151b0f183","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-200b05.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:32:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ecc01c88-4114-4a42-8fcd-28a151b0f183","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:46376","PortSpecifier":{"PortValue":46376}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783449124,"nanos":743367744},"http":{"id":"ecc01c88-4114-4a42-8fcd-28a151b0f183","method":"POST","headers":{":authority":"e2e-shared-b-200b05.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:32:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ecc01c88-4114-4a42-8fcd-28a151b0f183","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T18:32:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ecc01c88-4114-4a42-8fcd-28a151b0f183","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"13165771-7ad0-4fee-91b3-c3ee0a976429","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d354d02-b562-46f4-8cbc-cd983e35664b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/67bf82c58916"]}}
{"level":"debug","ts":"2026-07-07T18:32:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ecc01c88-4114-4a42-8fcd-28a151b0f183","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/67bf82c58916"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d354d02-b562-46f4-8cbc-cd983e35664b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"13165771-7ad0-4fee-91b3-c3ee0a976429","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a9c182abb05589fdaa6e7edcd0ea6244e050db80029590e554912f7cd441591f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-200b05.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:32:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ecc01c88-4114-4a42-8fcd-28a151b0f183","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:32:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ecc01c88-4114-4a42-8fcd-28a151b0f183","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:32:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ecc01c88-4114-4a42-8fcd-28a151b0f183","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-200b05/auth-test-model-200b05\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:32:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ecc01c88-4114-4a42-8fcd-28a151b0f183","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T18:32:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ecc01c88-4114-4a42-8fcd-28a151b0f183","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T18:32:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ecc01c88-4114-4a42-8fcd-28a151b0f183","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T18:32:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ecc01c88-4114-4a42-8fcd-28a151b0f183","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:32:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ecc01c88-4114-4a42-8fcd-28a151b0f183","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:32:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c47a119f-b920-442e-a7f8-e07427421557","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:46390","PortSpecifier":{"PortValue":46390}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c47a119f-b920-442e-a7f8-e07427421557","method":"GET","path":"/maas-api/v1/api-keys/ac4f8d22-c911-482f-8697-5a784c7ed4fb","host":"e2e-shared-b-200b05.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:32:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c47a119f-b920-442e-a7f8-e07427421557","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:46390","PortSpecifier":{"PortValue":46390}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783449124,"nanos":786837528},"http":{"id":"c47a119f-b920-442e-a7f8-e07427421557","method":"GET","headers":{":authority":"e2e-shared-b-200b05.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/ac4f8d22-c911-482f-8697-5a784c7ed4fb",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:32:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c47a119f-b920-442e-a7f8-e07427421557","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T18:32:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c47a119f-b920-442e-a7f8-e07427421557","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"13165771-7ad0-4fee-91b3-c3ee0a976429","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d354d02-b562-46f4-8cbc-cd983e35664b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/67bf82c58916"]}}
{"level":"debug","ts":"2026-07-07T18:32:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c47a119f-b920-442e-a7f8-e07427421557","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/67bf82c58916"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d354d02-b562-46f4-8cbc-cd983e35664b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"13165771-7ad0-4fee-91b3-c3ee0a976429","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a9c182abb05589fdaa6e7edcd0ea6244e050db80029590e554912f7cd441591f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-200b05.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/ac4f8d22-c911-482f-8697-5a784c7ed4fb",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:32:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c47a119f-b920-442e-a7f8-e07427421557","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:32:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c47a119f-b920-442e-a7f8-e07427421557","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:32:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c47a119f-b920-442e-a7f8-e07427421557","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-200b05/auth-test-model-200b05\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:32:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c47a119f-b920-442e-a7f8-e07427421557","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T18:32:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c47a119f-b920-442e-a7f8-e07427421557","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T18:32:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c47a119f-b920-442e-a7f8-e07427421557","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T18:32:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c47a119f-b920-442e-a7f8-e07427421557","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:32:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c47a119f-b920-442e-a7f8-e07427421557","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:32:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ea0bcdb9-06cf-4cf1-af84-da634893c6c6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:39018","PortSpecifier":{"PortValue":39018}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ea0bcdb9-06cf-4cf1-af84-da634893c6c6","method":"GET","path":"/maas-api/v1/api-keys/ac4f8d22-c911-482f-8697-5a784c7ed4fb","host":"e2e-shared-a-2b5160.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:32:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ea0bcdb9-06cf-4cf1-af84-da634893c6c6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:39018","PortSpecifier":{"PortValue":39018}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783449124,"nanos":829914365},"http":{"id":"ea0bcdb9-06cf-4cf1-af84-da634893c6c6","method":"GET","headers":{":authority":"e2e-shared-a-2b5160.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/ac4f8d22-c911-482f-8697-5a784c7ed4fb",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:32:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ea0bcdb9-06cf-4cf1-af84-da634893c6c6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T18:32:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ea0bcdb9-06cf-4cf1-af84-da634893c6c6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"13165771-7ad0-4fee-91b3-c3ee0a976429","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d354d02-b562-46f4-8cbc-cd983e35664b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/67bf82c58916"]}}
{"level":"debug","ts":"2026-07-07T18:32:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ea0bcdb9-06cf-4cf1-af84-da634893c6c6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/67bf82c58916"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d354d02-b562-46f4-8cbc-cd983e35664b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"13165771-7ad0-4fee-91b3-c3ee0a976429","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6c7d4e41ddb1bd416f2d5908a7bb8464816d48c020133e80633d04485d41709e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2b5160.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/ac4f8d22-c911-482f-8697-5a784c7ed4fb",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:32:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea0bcdb9-06cf-4cf1-af84-da634893c6c6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:32:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea0bcdb9-06cf-4cf1-af84-da634893c6c6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:32:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea0bcdb9-06cf-4cf1-af84-da634893c6c6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2b5160/auth-test-model-2b5160\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:32:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ea0bcdb9-06cf-4cf1-af84-da634893c6c6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T18:32:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea0bcdb9-06cf-4cf1-af84-da634893c6c6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T18:32:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea0bcdb9-06cf-4cf1-af84-da634893c6c6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T18:32:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ea0bcdb9-06cf-4cf1-af84-da634893c6c6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:32:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ea0bcdb9-06cf-4cf1-af84-da634893c6c6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:32:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9df30fa6-56ff-4ec6-af16-a3b870c0ac45","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:47356","PortSpecifier":{"PortValue":47356}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9df30fa6-56ff-4ec6-af16-a3b870c0ac45","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2b5160.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:32:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9df30fa6-56ff-4ec6-af16-a3b870c0ac45","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:47356","PortSpecifier":{"PortValue":47356}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783449142,"nanos":124554320},"http":{"id":"9df30fa6-56ff-4ec6-af16-a3b870c0ac45","method":"POST","headers":{":authority":"e2e-shared-a-2b5160.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:32:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9df30fa6-56ff-4ec6-af16-a3b870c0ac45","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T18:32:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9df30fa6-56ff-4ec6-af16-a3b870c0ac45","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"13165771-7ad0-4fee-91b3-c3ee0a976429","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d354d02-b562-46f4-8cbc-cd983e35664b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/67bf82c58916"]}}
{"level":"debug","ts":"2026-07-07T18:32:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9df30fa6-56ff-4ec6-af16-a3b870c0ac45","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/67bf82c58916"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d354d02-b562-46f4-8cbc-cd983e35664b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"13165771-7ad0-4fee-91b3-c3ee0a976429","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6c7d4e41ddb1bd416f2d5908a7bb8464816d48c020133e80633d04485d41709e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2b5160.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:32:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9df30fa6-56ff-4ec6-af16-a3b870c0ac45","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:32:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9df30fa6-56ff-4ec6-af16-a3b870c0ac45","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:32:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9df30fa6-56ff-4ec6-af16-a3b870c0ac45","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2b5160/auth-test-model-2b5160\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:32:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9df30fa6-56ff-4ec6-af16-a3b870c0ac45","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T18:32:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9df30fa6-56ff-4ec6-af16-a3b870c0ac45","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T18:32:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9df30fa6-56ff-4ec6-af16-a3b870c0ac45","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T18:32:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9df30fa6-56ff-4ec6-af16-a3b870c0ac45","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:32:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9df30fa6-56ff-4ec6-af16-a3b870c0ac45","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:32:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"46e68d74-9bfa-4e69-80c5-61b1bcce942a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:39522","PortSpecifier":{"PortValue":39522}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"46e68d74-9bfa-4e69-80c5-61b1bcce942a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-200b05.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:32:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"46e68d74-9bfa-4e69-80c5-61b1bcce942a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:39522","PortSpecifier":{"PortValue":39522}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783449142,"nanos":163646935},"http":{"id":"46e68d74-9bfa-4e69-80c5-61b1bcce942a","method":"POST","headers":{":authority":"e2e-shared-b-200b05.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:32:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"46e68d74-9bfa-4e69-80c5-61b1bcce942a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T18:32:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"46e68d74-9bfa-4e69-80c5-61b1bcce942a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"13165771-7ad0-4fee-91b3-c3ee0a976429","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d354d02-b562-46f4-8cbc-cd983e35664b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/67bf82c58916"]}}
{"level":"debug","ts":"2026-07-07T18:32:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"46e68d74-9bfa-4e69-80c5-61b1bcce942a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/67bf82c58916"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d354d02-b562-46f4-8cbc-cd983e35664b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"13165771-7ad0-4fee-91b3-c3ee0a976429","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a9c182abb05589fdaa6e7edcd0ea6244e050db80029590e554912f7cd441591f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-200b05.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:32:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46e68d74-9bfa-4e69-80c5-61b1bcce942a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:32:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46e68d74-9bfa-4e69-80c5-61b1bcce942a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:32:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46e68d74-9bfa-4e69-80c5-61b1bcce942a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-200b05/auth-test-model-200b05\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:32:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"46e68d74-9bfa-4e69-80c5-61b1bcce942a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T18:32:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"46e68d74-9bfa-4e69-80c5-61b1bcce942a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T18:32:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"46e68d74-9bfa-4e69-80c5-61b1bcce942a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T18:32:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"46e68d74-9bfa-4e69-80c5-61b1bcce942a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:32:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"46e68d74-9bfa-4e69-80c5-61b1bcce942a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:32:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"603a396b-08ca-4591-92d8-6983649cea67","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:47366","PortSpecifier":{"PortValue":47366}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"603a396b-08ca-4591-92d8-6983649cea67","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-2b5160.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:32:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"603a396b-08ca-4591-92d8-6983649cea67","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:47366","PortSpecifier":{"PortValue":47366}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783449142,"nanos":203518461},"http":{"id":"603a396b-08ca-4591-92d8-6983649cea67","method":"POST","headers":{":authority":"e2e-shared-a-2b5160.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:32:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"603a396b-08ca-4591-92d8-6983649cea67","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ENE5UaN0wabFTcGH_2xrIXGGX2QzdcpkwAaXvj9f2WSqQpFQCDLEmzHRFKNG"}
{"level":"debug","ts":"2026-07-07T18:32:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"603a396b-08ca-4591-92d8-6983649cea67","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2b5160.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ENE5UaN0wabFTcGH_2xrIXGGX2QzdcpkwAaXvj9f2WSqQpFQCDLEmzHRFKNG\"}"}
{"level":"debug","ts":"2026-07-07T18:32:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"603a396b-08ca-4591-92d8-6983649cea67","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2b5160.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2c6f1041-0def-435d-a3cb-6700a391fa9f","keyName":"e2e-auth-iso-a-c27c2e","subscription":"e2e-auth-iso-0a8038","tenant":"e2e-shared-a-2b5160","userId":"2c6f1041-0def-435d-a3cb-6700a391fa9f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T18:32:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"603a396b-08ca-4591-92d8-6983649cea67","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:32:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"603a396b-08ca-4591-92d8-6983649cea67","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:32:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"603a396b-08ca-4591-92d8-6983649cea67","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:32:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"603a396b-08ca-4591-92d8-6983649cea67","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2b5160/auth-test-model-2b5160\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:32:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"603a396b-08ca-4591-92d8-6983649cea67","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T18:32:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"603a396b-08ca-4591-92d8-6983649cea67","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T18:32:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"603a396b-08ca-4591-92d8-6983649cea67","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T18:32:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"603a396b-08ca-4591-92d8-6983649cea67","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-0a8038"}
{"level":"info","ts":"2026-07-07T18:32:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"603a396b-08ca-4591-92d8-6983649cea67","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:32:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"603a396b-08ca-4591-92d8-6983649cea67","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/419580df7a8529bc16213d7af4f552a8a3f945d00d74b2ccf9cd0fb200a2b195"}
{"level":"info","ts":"2026-07-07T18:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/63d61091532e54bd0abab082041cf63a71784aee8b8fe7279e5d861b1397a9dc"}
{"level":"info","ts":"2026-07-07T18:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8bc22122fdde2a751ca1e208890c7f867164f22efea8dbfa8c0a273ca7b6d447"}
{"level":"info","ts":"2026-07-07T18:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3440d51480b3a49c9abf723121eacd4157955a46c8d80edb260e7eb916c17e67"}
{"level":"info","ts":"2026-07-07T18:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f1d747a967e885e8d16192c83b3d61f0bc01df6ed1f3333b231772382d0f7d99"}
{"level":"info","ts":"2026-07-07T18:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e59680078ecd7984855de3434d743bf4076b8f2934ed8a53cc37beabc676e994"}
{"level":"info","ts":"2026-07-07T18:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7b0c111acd99f6694417a6124fc3f335d1e9229d82669a04dcf9d4cd9349129b"}
{"level":"info","ts":"2026-07-07T18:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d5ceebf96bf20ff709697aa0a27b6c3bc92e1e18e5acf9540be7d3677e3194bc"}
{"level":"info","ts":"2026-07-07T18:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cb318eef8e9073aa31b74ffe9fc39d12cc1c6ad9fa0e91d4bca461c1399f6dd5"}
{"level":"info","ts":"2026-07-07T18:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/108a645fe6f65a638598eac8011398ab2ab0c1a850b15428a600b47382a8e07f"}
{"level":"info","ts":"2026-07-07T18:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/65f63c30117c50ae3f0e1181455926eb25cc8a23cd5ff888c100196f6ecd3d75"}
{"level":"info","ts":"2026-07-07T18:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1717a574f65a96ad79a860e82e3367b28131ee9243f509f1ced0d25a5d27e48a"}
{"level":"info","ts":"2026-07-07T18:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5e5e529d8d0c5476078ae507e6d0a06313f34140b30f155e532197d65dfa65ec"}
{"level":"info","ts":"2026-07-07T18:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/603d439d80dc607324d8eb202503e6f08ea9ab30ee7e0dfcf0d37d153f9a6468"}
{"level":"info","ts":"2026-07-07T18:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fe419deb44410346da352ca0da64ef9747e98011856178a1ed63a4528c57d973"}
{"level":"info","ts":"2026-07-07T18:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/35692854eac2ff75b38f6d6968ae9a7ec0687a8d8619d97820bfe25657ec18c3"}
{"level":"debug","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0e77e1b242a2e8ce653204f048f95c96ab030427cf3d2b4d72a311dfbfb3ee1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:32:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:32:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0e77e1b242a2e8ce653204f048f95c96ab030427cf3d2b4d72a311dfbfb3ee1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0e77e1b242a2e8ce653204f048f95c96ab030427cf3d2b4d72a311dfbfb3ee1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0e77e1b242a2e8ce653204f048f95c96ab030427cf3d2b4d72a311dfbfb3ee1"}
{"level":"debug","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0e77e1b242a2e8ce653204f048f95c96ab030427cf3d2b4d72a311dfbfb3ee1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0e77e1b242a2e8ce653204f048f95c96ab030427cf3d2b4d72a311dfbfb3ee1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0e77e1b242a2e8ce653204f048f95c96ab030427cf3d2b4d72a311dfbfb3ee1"}
{"level":"debug","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0e77e1b242a2e8ce653204f048f95c96ab030427cf3d2b4d72a311dfbfb3ee1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:32:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:32:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d0e77e1b242a2e8ce653204f048f95c96ab030427cf3d2b4d72a311dfbfb3ee1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0e77e1b242a2e8ce653204f048f95c96ab030427cf3d2b4d72a311dfbfb3ee1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0e77e1b242a2e8ce653204f048f95c96ab030427cf3d2b4d72a311dfbfb3ee1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:32:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:32:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0e77e1b242a2e8ce653204f048f95c96ab030427cf3d2b4d72a311dfbfb3ee1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0e77e1b242a2e8ce653204f048f95c96ab030427cf3d2b4d72a311dfbfb3ee1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0e77e1b242a2e8ce653204f048f95c96ab030427cf3d2b4d72a311dfbfb3ee1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0e77e1b242a2e8ce653204f048f95c96ab030427cf3d2b4d72a311dfbfb3ee1"}
{"level":"debug","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0e77e1b242a2e8ce653204f048f95c96ab030427cf3d2b4d72a311dfbfb3ee1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0e77e1b242a2e8ce653204f048f95c96ab030427cf3d2b4d72a311dfbfb3ee1"}
{"level":"debug","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0e77e1b242a2e8ce653204f048f95c96ab030427cf3d2b4d72a311dfbfb3ee1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:32:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:32:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d0e77e1b242a2e8ce653204f048f95c96ab030427cf3d2b4d72a311dfbfb3ee1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0e77e1b242a2e8ce653204f048f95c96ab030427cf3d2b4d72a311dfbfb3ee1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0e77e1b242a2e8ce653204f048f95c96ab030427cf3d2b4d72a311dfbfb3ee1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:32:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:32:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0e77e1b242a2e8ce653204f048f95c96ab030427cf3d2b4d72a311dfbfb3ee1"}
{"level":"info","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0e77e1b242a2e8ce653204f048f95c96ab030427cf3d2b4d72a311dfbfb3ee1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0e77e1b242a2e8ce653204f048f95c96ab030427cf3d2b4d72a311dfbfb3ee1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0e77e1b242a2e8ce653204f048f95c96ab030427cf3d2b4d72a311dfbfb3ee1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0e77e1b242a2e8ce653204f048f95c96ab030427cf3d2b4d72a311dfbfb3ee1"}
{"level":"debug","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0e77e1b242a2e8ce653204f048f95c96ab030427cf3d2b4d72a311dfbfb3ee1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:32:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:32:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d0e77e1b242a2e8ce653204f048f95c96ab030427cf3d2b4d72a311dfbfb3ee1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0e77e1b242a2e8ce653204f048f95c96ab030427cf3d2b4d72a311dfbfb3ee1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0e77e1b242a2e8ce653204f048f95c96ab030427cf3d2b4d72a311dfbfb3ee1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:32:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:32:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0e77e1b242a2e8ce653204f048f95c96ab030427cf3d2b4d72a311dfbfb3ee1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0e77e1b242a2e8ce653204f048f95c96ab030427cf3d2b4d72a311dfbfb3ee1"}
{"level":"debug","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0e77e1b242a2e8ce653204f048f95c96ab030427cf3d2b4d72a311dfbfb3ee1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0e77e1b242a2e8ce653204f048f95c96ab030427cf3d2b4d72a311dfbfb3ee1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0e77e1b242a2e8ce653204f048f95c96ab030427cf3d2b4d72a311dfbfb3ee1"}
{"level":"debug","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0e77e1b242a2e8ce653204f048f95c96ab030427cf3d2b4d72a311dfbfb3ee1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:32:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:32:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d0e77e1b242a2e8ce653204f048f95c96ab030427cf3d2b4d72a311dfbfb3ee1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0e77e1b242a2e8ce653204f048f95c96ab030427cf3d2b4d72a311dfbfb3ee1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0e77e1b242a2e8ce653204f048f95c96ab030427cf3d2b4d72a311dfbfb3ee1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:32:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:32:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0e77e1b242a2e8ce653204f048f95c96ab030427cf3d2b4d72a311dfbfb3ee1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"928628794017ceb2d915d407b1c5088cbd972ace6ceba1f911e25327bc4ec534","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:32:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:32:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0e77e1b242a2e8ce653204f048f95c96ab030427cf3d2b4d72a311dfbfb3ee1"}
{"level":"info","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"928628794017ceb2d915d407b1c5088cbd972ace6ceba1f911e25327bc4ec534","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0e77e1b242a2e8ce653204f048f95c96ab030427cf3d2b4d72a311dfbfb3ee1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:32:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:32:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d0e77e1b242a2e8ce653204f048f95c96ab030427cf3d2b4d72a311dfbfb3ee1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0e77e1b242a2e8ce653204f048f95c96ab030427cf3d2b4d72a311dfbfb3ee1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"928628794017ceb2d915d407b1c5088cbd972ace6ceba1f911e25327bc4ec534","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:32:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:32:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/928628794017ceb2d915d407b1c5088cbd972ace6ceba1f911e25327bc4ec534"}
{"level":"info","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"928628794017ceb2d915d407b1c5088cbd972ace6ceba1f911e25327bc4ec534","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0e77e1b242a2e8ce653204f048f95c96ab030427cf3d2b4d72a311dfbfb3ee1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:32:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:32:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0e77e1b242a2e8ce653204f048f95c96ab030427cf3d2b4d72a311dfbfb3ee1"}
{"level":"info","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0e77e1b242a2e8ce653204f048f95c96ab030427cf3d2b4d72a311dfbfb3ee1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"928628794017ceb2d915d407b1c5088cbd972ace6ceba1f911e25327bc4ec534","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0e77e1b242a2e8ce653204f048f95c96ab030427cf3d2b4d72a311dfbfb3ee1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:32:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:32:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d0e77e1b242a2e8ce653204f048f95c96ab030427cf3d2b4d72a311dfbfb3ee1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0e77e1b242a2e8ce653204f048f95c96ab030427cf3d2b4d72a311dfbfb3ee1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0e77e1b242a2e8ce653204f048f95c96ab030427cf3d2b4d72a311dfbfb3ee1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:32:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:32:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d0e77e1b242a2e8ce653204f048f95c96ab030427cf3d2b4d72a311dfbfb3ee1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/928628794017ceb2d915d407b1c5088cbd972ace6ceba1f911e25327bc4ec534"}
{"level":"error","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d0e77e1b242a2e8ce653204f048f95c96ab030427cf3d2b4d72a311dfbfb3ee1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d0e77e1b242a2e8ce653204f048f95c96ab030427cf3d2b4d72a311dfbfb3ee1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"928628794017ceb2d915d407b1c5088cbd972ace6ceba1f911e25327bc4ec534","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:32:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:32:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["928628794017ceb2d915d407b1c5088cbd972ace6ceba1f911e25327bc4ec534"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"928628794017ceb2d915d407b1c5088cbd972ace6ceba1f911e25327bc4ec534","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0e77e1b242a2e8ce653204f048f95c96ab030427cf3d2b4d72a311dfbfb3ee1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:32:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:32:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0e77e1b242a2e8ce653204f048f95c96ab030427cf3d2b4d72a311dfbfb3ee1"}
{"level":"info","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0e77e1b242a2e8ce653204f048f95c96ab030427cf3d2b4d72a311dfbfb3ee1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"928628794017ceb2d915d407b1c5088cbd972ace6ceba1f911e25327bc4ec534","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:32:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:32:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/928628794017ceb2d915d407b1c5088cbd972ace6ceba1f911e25327bc4ec534"}
{"level":"info","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"928628794017ceb2d915d407b1c5088cbd972ace6ceba1f911e25327bc4ec534","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb56ebc3dc1bef3acf1b5f212a4fd527114fe3f0d9d7d13a1b0b27f0b3a34c57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:32:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:32:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb56ebc3dc1bef3acf1b5f212a4fd527114fe3f0d9d7d13a1b0b27f0b3a34c57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0e77e1b242a2e8ce653204f048f95c96ab030427cf3d2b4d72a311dfbfb3ee1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:32:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:32:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d0e77e1b242a2e8ce653204f048f95c96ab030427cf3d2b4d72a311dfbfb3ee1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb56ebc3dc1bef3acf1b5f212a4fd527114fe3f0d9d7d13a1b0b27f0b3a34c57"}
{"level":"info","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0e77e1b242a2e8ce653204f048f95c96ab030427cf3d2b4d72a311dfbfb3ee1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"928628794017ceb2d915d407b1c5088cbd972ace6ceba1f911e25327bc4ec534","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:32:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:32:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["928628794017ceb2d915d407b1c5088cbd972ace6ceba1f911e25327bc4ec534"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0e77e1b242a2e8ce653204f048f95c96ab030427cf3d2b4d72a311dfbfb3ee1"}
{"level":"info","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"928628794017ceb2d915d407b1c5088cbd972ace6ceba1f911e25327bc4ec534","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb56ebc3dc1bef3acf1b5f212a4fd527114fe3f0d9d7d13a1b0b27f0b3a34c57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:32:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:32:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb56ebc3dc1bef3acf1b5f212a4fd527114fe3f0d9d7d13a1b0b27f0b3a34c57"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb56ebc3dc1bef3acf1b5f212a4fd527114fe3f0d9d7d13a1b0b27f0b3a34c57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0e77e1b242a2e8ce653204f048f95c96ab030427cf3d2b4d72a311dfbfb3ee1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"928628794017ceb2d915d407b1c5088cbd972ace6ceba1f911e25327bc4ec534","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:32:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:32:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/928628794017ceb2d915d407b1c5088cbd972ace6ceba1f911e25327bc4ec534"}
{"level":"info","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"928628794017ceb2d915d407b1c5088cbd972ace6ceba1f911e25327bc4ec534","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb56ebc3dc1bef3acf1b5f212a4fd527114fe3f0d9d7d13a1b0b27f0b3a34c57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:32:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:32:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb56ebc3dc1bef3acf1b5f212a4fd527114fe3f0d9d7d13a1b0b27f0b3a34c57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd8aae53cd7ff08f3e985856d506fb9f0f73bb2f963ab19f0c7dabe52b198bd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:32:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:32:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb56ebc3dc1bef3acf1b5f212a4fd527114fe3f0d9d7d13a1b0b27f0b3a34c57"}
{"level":"info","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd8aae53cd7ff08f3e985856d506fb9f0f73bb2f963ab19f0c7dabe52b198bd8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"928628794017ceb2d915d407b1c5088cbd972ace6ceba1f911e25327bc4ec534","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:32:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:32:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["928628794017ceb2d915d407b1c5088cbd972ace6ceba1f911e25327bc4ec534"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0e77e1b242a2e8ce653204f048f95c96ab030427cf3d2b4d72a311dfbfb3ee1"}
{"level":"info","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"928628794017ceb2d915d407b1c5088cbd972ace6ceba1f911e25327bc4ec534","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb56ebc3dc1bef3acf1b5f212a4fd527114fe3f0d9d7d13a1b0b27f0b3a34c57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:32:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:32:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb56ebc3dc1bef3acf1b5f212a4fd527114fe3f0d9d7d13a1b0b27f0b3a34c57"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb56ebc3dc1bef3acf1b5f212a4fd527114fe3f0d9d7d13a1b0b27f0b3a34c57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd8aae53cd7ff08f3e985856d506fb9f0f73bb2f963ab19f0c7dabe52b198bd8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"928628794017ceb2d915d407b1c5088cbd972ace6ceba1f911e25327bc4ec534","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:32:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:32:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/928628794017ceb2d915d407b1c5088cbd972ace6ceba1f911e25327bc4ec534"}
{"level":"info","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"928628794017ceb2d915d407b1c5088cbd972ace6ceba1f911e25327bc4ec534","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb56ebc3dc1bef3acf1b5f212a4fd527114fe3f0d9d7d13a1b0b27f0b3a34c57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd8aae53cd7ff08f3e985856d506fb9f0f73bb2f963ab19f0c7dabe52b198bd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:32:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:32:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd8aae53cd7ff08f3e985856d506fb9f0f73bb2f963ab19f0c7dabe52b198bd8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"928628794017ceb2d915d407b1c5088cbd972ace6ceba1f911e25327bc4ec534","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:32:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:32:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["928628794017ceb2d915d407b1c5088cbd972ace6ceba1f911e25327bc4ec534"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd8aae53cd7ff08f3e985856d506fb9f0f73bb2f963ab19f0c7dabe52b198bd8"}
{"level":"info","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"928628794017ceb2d915d407b1c5088cbd972ace6ceba1f911e25327bc4ec534","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd8aae53cd7ff08f3e985856d506fb9f0f73bb2f963ab19f0c7dabe52b198bd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:32:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:32:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd8aae53cd7ff08f3e985856d506fb9f0f73bb2f963ab19f0c7dabe52b198bd8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb56ebc3dc1bef3acf1b5f212a4fd527114fe3f0d9d7d13a1b0b27f0b3a34c57"}
{"level":"info","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd8aae53cd7ff08f3e985856d506fb9f0f73bb2f963ab19f0c7dabe52b198bd8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"928628794017ceb2d915d407b1c5088cbd972ace6ceba1f911e25327bc4ec534","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:32:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:32:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"928628794017ceb2d915d407b1c5088cbd972ace6ceba1f911e25327bc4ec534","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd8aae53cd7ff08f3e985856d506fb9f0f73bb2f963ab19f0c7dabe52b198bd8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"928628794017ceb2d915d407b1c5088cbd972ace6ceba1f911e25327bc4ec534","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/928628794017ceb2d915d407b1c5088cbd972ace6ceba1f911e25327bc4ec534"}
{"level":"debug","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"928628794017ceb2d915d407b1c5088cbd972ace6ceba1f911e25327bc4ec534","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:32:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:32:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["928628794017ceb2d915d407b1c5088cbd972ace6ceba1f911e25327bc4ec534"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"928628794017ceb2d915d407b1c5088cbd972ace6ceba1f911e25327bc4ec534","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"928628794017ceb2d915d407b1c5088cbd972ace6ceba1f911e25327bc4ec534","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd8aae53cd7ff08f3e985856d506fb9f0f73bb2f963ab19f0c7dabe52b198bd8"}
{"level":"info","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/928628794017ceb2d915d407b1c5088cbd972ace6ceba1f911e25327bc4ec534"}
{"level":"debug","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"12df09ec89ff6371979d04bad5927e2d885a26207605cd9449ba110f5c45eed6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:32:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:32:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"12df09ec89ff6371979d04bad5927e2d885a26207605cd9449ba110f5c45eed6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55706dadc1e5ef6f3713a7b7acbe3604b80c1683d4341c65e7359ee9042cfe21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:32:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:32:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12df09ec89ff6371979d04bad5927e2d885a26207605cd9449ba110f5c45eed6"}
{"level":"info","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55706dadc1e5ef6f3713a7b7acbe3604b80c1683d4341c65e7359ee9042cfe21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"12df09ec89ff6371979d04bad5927e2d885a26207605cd9449ba110f5c45eed6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:32:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:32:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["12df09ec89ff6371979d04bad5927e2d885a26207605cd9449ba110f5c45eed6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55706dadc1e5ef6f3713a7b7acbe3604b80c1683d4341c65e7359ee9042cfe21"}
{"level":"info","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"12df09ec89ff6371979d04bad5927e2d885a26207605cd9449ba110f5c45eed6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55706dadc1e5ef6f3713a7b7acbe3604b80c1683d4341c65e7359ee9042cfe21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:32:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:32:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55706dadc1e5ef6f3713a7b7acbe3604b80c1683d4341c65e7359ee9042cfe21"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12df09ec89ff6371979d04bad5927e2d885a26207605cd9449ba110f5c45eed6"}
{"level":"info","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55706dadc1e5ef6f3713a7b7acbe3604b80c1683d4341c65e7359ee9042cfe21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"12df09ec89ff6371979d04bad5927e2d885a26207605cd9449ba110f5c45eed6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55706dadc1e5ef6f3713a7b7acbe3604b80c1683d4341c65e7359ee9042cfe21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:32:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:32:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55706dadc1e5ef6f3713a7b7acbe3604b80c1683d4341c65e7359ee9042cfe21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55706dadc1e5ef6f3713a7b7acbe3604b80c1683d4341c65e7359ee9042cfe21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55706dadc1e5ef6f3713a7b7acbe3604b80c1683d4341c65e7359ee9042cfe21","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55706dadc1e5ef6f3713a7b7acbe3604b80c1683d4341c65e7359ee9042cfe21"}
{"level":"debug","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6840e777cd24484d78eb8d81cd39abcdbd015c509208ddc473c2a97c9554d6e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:32:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:32:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12df09ec89ff6371979d04bad5927e2d885a26207605cd9449ba110f5c45eed6"}
{"level":"info","ts":"2026-07-07T18:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6840e777cd24484d78eb8d81cd39abcdbd015c509208ddc473c2a97c9554d6e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55706dadc1e5ef6f3713a7b7acbe3604b80c1683d4341c65e7359ee9042cfe21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2a5e11ae39603c2d0253569e6ab0ddad2345e9a7b984892bbda9c575b104859","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:32:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:32:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55706dadc1e5ef6f3713a7b7acbe3604b80c1683d4341c65e7359ee9042cfe21"}
{"level":"info","ts":"2026-07-07T18:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2a5e11ae39603c2d0253569e6ab0ddad2345e9a7b984892bbda9c575b104859","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6840e777cd24484d78eb8d81cd39abcdbd015c509208ddc473c2a97c9554d6e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:32:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:32:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6840e777cd24484d78eb8d81cd39abcdbd015c509208ddc473c2a97c9554d6e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2a5e11ae39603c2d0253569e6ab0ddad2345e9a7b984892bbda9c575b104859","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6840e777cd24484d78eb8d81cd39abcdbd015c509208ddc473c2a97c9554d6e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55706dadc1e5ef6f3713a7b7acbe3604b80c1683d4341c65e7359ee9042cfe21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:32:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:32:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55706dadc1e5ef6f3713a7b7acbe3604b80c1683d4341c65e7359ee9042cfe21"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6840e777cd24484d78eb8d81cd39abcdbd015c509208ddc473c2a97c9554d6e8"}
{"level":"info","ts":"2026-07-07T18:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55706dadc1e5ef6f3713a7b7acbe3604b80c1683d4341c65e7359ee9042cfe21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6840e777cd24484d78eb8d81cd39abcdbd015c509208ddc473c2a97c9554d6e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:32:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:32:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6840e777cd24484d78eb8d81cd39abcdbd015c509208ddc473c2a97c9554d6e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6840e777cd24484d78eb8d81cd39abcdbd015c509208ddc473c2a97c9554d6e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2a5e11ae39603c2d0253569e6ab0ddad2345e9a7b984892bbda9c575b104859","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:32:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:32:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2a5e11ae39603c2d0253569e6ab0ddad2345e9a7b984892bbda9c575b104859"}
{"level":"info","ts":"2026-07-07T18:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2a5e11ae39603c2d0253569e6ab0ddad2345e9a7b984892bbda9c575b104859","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55706dadc1e5ef6f3713a7b7acbe3604b80c1683d4341c65e7359ee9042cfe21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6840e777cd24484d78eb8d81cd39abcdbd015c509208ddc473c2a97c9554d6e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:32:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:32:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6840e777cd24484d78eb8d81cd39abcdbd015c509208ddc473c2a97c9554d6e8"}
{"level":"info","ts":"2026-07-07T18:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6840e777cd24484d78eb8d81cd39abcdbd015c509208ddc473c2a97c9554d6e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2a5e11ae39603c2d0253569e6ab0ddad2345e9a7b984892bbda9c575b104859","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:32:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:32:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2a5e11ae39603c2d0253569e6ab0ddad2345e9a7b984892bbda9c575b104859"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55706dadc1e5ef6f3713a7b7acbe3604b80c1683d4341c65e7359ee9042cfe21"}
{"level":"info","ts":"2026-07-07T18:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2a5e11ae39603c2d0253569e6ab0ddad2345e9a7b984892bbda9c575b104859","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6840e777cd24484d78eb8d81cd39abcdbd015c509208ddc473c2a97c9554d6e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:32:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:32:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6840e777cd24484d78eb8d81cd39abcdbd015c509208ddc473c2a97c9554d6e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2a5e11ae39603c2d0253569e6ab0ddad2345e9a7b984892bbda9c575b104859"}
{"level":"info","ts":"2026-07-07T18:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6840e777cd24484d78eb8d81cd39abcdbd015c509208ddc473c2a97c9554d6e8"}
{"level":"info","ts":"2026-07-07T18:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6840e777cd24484d78eb8d81cd39abcdbd015c509208ddc473c2a97c9554d6e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2a5e11ae39603c2d0253569e6ab0ddad2345e9a7b984892bbda9c575b104859","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:32:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:32:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2a5e11ae39603c2d0253569e6ab0ddad2345e9a7b984892bbda9c575b104859"}
{"level":"info","ts":"2026-07-07T18:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2a5e11ae39603c2d0253569e6ab0ddad2345e9a7b984892bbda9c575b104859","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6840e777cd24484d78eb8d81cd39abcdbd015c509208ddc473c2a97c9554d6e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:32:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:32:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6840e777cd24484d78eb8d81cd39abcdbd015c509208ddc473c2a97c9554d6e8"}
{"level":"info","ts":"2026-07-07T18:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2a5e11ae39603c2d0253569e6ab0ddad2345e9a7b984892bbda9c575b104859"}
{"level":"info","ts":"2026-07-07T18:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6840e777cd24484d78eb8d81cd39abcdbd015c509208ddc473c2a97c9554d6e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2a5e11ae39603c2d0253569e6ab0ddad2345e9a7b984892bbda9c575b104859","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:32:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:32:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2a5e11ae39603c2d0253569e6ab0ddad2345e9a7b984892bbda9c575b104859"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6840e777cd24484d78eb8d81cd39abcdbd015c509208ddc473c2a97c9554d6e8"}
{"level":"info","ts":"2026-07-07T18:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2a5e11ae39603c2d0253569e6ab0ddad2345e9a7b984892bbda9c575b104859","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6840e777cd24484d78eb8d81cd39abcdbd015c509208ddc473c2a97c9554d6e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:32:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:32:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6840e777cd24484d78eb8d81cd39abcdbd015c509208ddc473c2a97c9554d6e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2a5e11ae39603c2d0253569e6ab0ddad2345e9a7b984892bbda9c575b104859"}
{"level":"info","ts":"2026-07-07T18:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6840e777cd24484d78eb8d81cd39abcdbd015c509208ddc473c2a97c9554d6e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2a5e11ae39603c2d0253569e6ab0ddad2345e9a7b984892bbda9c575b104859","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6840e777cd24484d78eb8d81cd39abcdbd015c509208ddc473c2a97c9554d6e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:32:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:32:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6840e777cd24484d78eb8d81cd39abcdbd015c509208ddc473c2a97c9554d6e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6840e777cd24484d78eb8d81cd39abcdbd015c509208ddc473c2a97c9554d6e8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6840e777cd24484d78eb8d81cd39abcdbd015c509208ddc473c2a97c9554d6e8"}
{"level":"debug","ts":"2026-07-07T18:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6840e777cd24484d78eb8d81cd39abcdbd015c509208ddc473c2a97c9554d6e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6840e777cd24484d78eb8d81cd39abcdbd015c509208ddc473c2a97c9554d6e8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6840e777cd24484d78eb8d81cd39abcdbd015c509208ddc473c2a97c9554d6e8"}
{"level":"debug","ts":"2026-07-07T18:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6840e777cd24484d78eb8d81cd39abcdbd015c509208ddc473c2a97c9554d6e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:32:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:32:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6840e777cd24484d78eb8d81cd39abcdbd015c509208ddc473c2a97c9554d6e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6840e777cd24484d78eb8d81cd39abcdbd015c509208ddc473c2a97c9554d6e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6840e777cd24484d78eb8d81cd39abcdbd015c509208ddc473c2a97c9554d6e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:32:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:32:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6840e777cd24484d78eb8d81cd39abcdbd015c509208ddc473c2a97c9554d6e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6840e777cd24484d78eb8d81cd39abcdbd015c509208ddc473c2a97c9554d6e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6840e777cd24484d78eb8d81cd39abcdbd015c509208ddc473c2a97c9554d6e8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6840e777cd24484d78eb8d81cd39abcdbd015c509208ddc473c2a97c9554d6e8"}
{"level":"debug","ts":"2026-07-07T18:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6840e777cd24484d78eb8d81cd39abcdbd015c509208ddc473c2a97c9554d6e8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6840e777cd24484d78eb8d81cd39abcdbd015c509208ddc473c2a97c9554d6e8"}
{"level":"debug","ts":"2026-07-07T18:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6840e777cd24484d78eb8d81cd39abcdbd015c509208ddc473c2a97c9554d6e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:32:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:32:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6840e777cd24484d78eb8d81cd39abcdbd015c509208ddc473c2a97c9554d6e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6840e777cd24484d78eb8d81cd39abcdbd015c509208ddc473c2a97c9554d6e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6840e777cd24484d78eb8d81cd39abcdbd015c509208ddc473c2a97c9554d6e8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6840e777cd24484d78eb8d81cd39abcdbd015c509208ddc473c2a97c9554d6e8"}
{"level":"debug","ts":"2026-07-07T18:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05c62f7eaecbfa14939993ec52ec782713fc0574ab7923705baf47a3a3cf7506","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:32:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:32:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05c62f7eaecbfa14939993ec52ec782713fc0574ab7923705baf47a3a3cf7506"}
{"level":"info","ts":"2026-07-07T18:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05c62f7eaecbfa14939993ec52ec782713fc0574ab7923705baf47a3a3cf7506","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05c62f7eaecbfa14939993ec52ec782713fc0574ab7923705baf47a3a3cf7506","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:32:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:32:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05c62f7eaecbfa14939993ec52ec782713fc0574ab7923705baf47a3a3cf7506"}
{"level":"info","ts":"2026-07-07T18:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05c62f7eaecbfa14939993ec52ec782713fc0574ab7923705baf47a3a3cf7506","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05c62f7eaecbfa14939993ec52ec782713fc0574ab7923705baf47a3a3cf7506","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05c62f7eaecbfa14939993ec52ec782713fc0574ab7923705baf47a3a3cf7506","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05c62f7eaecbfa14939993ec52ec782713fc0574ab7923705baf47a3a3cf7506"}
{"level":"debug","ts":"2026-07-07T18:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05c62f7eaecbfa14939993ec52ec782713fc0574ab7923705baf47a3a3cf7506","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:32:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:32:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["05c62f7eaecbfa14939993ec52ec782713fc0574ab7923705baf47a3a3cf7506"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05c62f7eaecbfa14939993ec52ec782713fc0574ab7923705baf47a3a3cf7506","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05c62f7eaecbfa14939993ec52ec782713fc0574ab7923705baf47a3a3cf7506","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:32:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:32:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05c62f7eaecbfa14939993ec52ec782713fc0574ab7923705baf47a3a3cf7506","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05c62f7eaecbfa14939993ec52ec782713fc0574ab7923705baf47a3a3cf7506","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05c62f7eaecbfa14939993ec52ec782713fc0574ab7923705baf47a3a3cf7506"}
{"level":"debug","ts":"2026-07-07T18:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05c62f7eaecbfa14939993ec52ec782713fc0574ab7923705baf47a3a3cf7506","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05c62f7eaecbfa14939993ec52ec782713fc0574ab7923705baf47a3a3cf7506"}
{"level":"debug","ts":"2026-07-07T18:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05c62f7eaecbfa14939993ec52ec782713fc0574ab7923705baf47a3a3cf7506","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:32:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:32:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["05c62f7eaecbfa14939993ec52ec782713fc0574ab7923705baf47a3a3cf7506"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05c62f7eaecbfa14939993ec52ec782713fc0574ab7923705baf47a3a3cf7506","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05c62f7eaecbfa14939993ec52ec782713fc0574ab7923705baf47a3a3cf7506","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:32:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:32:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05c62f7eaecbfa14939993ec52ec782713fc0574ab7923705baf47a3a3cf7506","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05c62f7eaecbfa14939993ec52ec782713fc0574ab7923705baf47a3a3cf7506"}
{"level":"debug","ts":"2026-07-07T18:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05c62f7eaecbfa14939993ec52ec782713fc0574ab7923705baf47a3a3cf7506","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05c62f7eaecbfa14939993ec52ec782713fc0574ab7923705baf47a3a3cf7506","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05c62f7eaecbfa14939993ec52ec782713fc0574ab7923705baf47a3a3cf7506"}
{"level":"debug","ts":"2026-07-07T18:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05c62f7eaecbfa14939993ec52ec782713fc0574ab7923705baf47a3a3cf7506","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:32:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:32:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["05c62f7eaecbfa14939993ec52ec782713fc0574ab7923705baf47a3a3cf7506"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05c62f7eaecbfa14939993ec52ec782713fc0574ab7923705baf47a3a3cf7506","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05c62f7eaecbfa14939993ec52ec782713fc0574ab7923705baf47a3a3cf7506","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:32:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:32:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05c62f7eaecbfa14939993ec52ec782713fc0574ab7923705baf47a3a3cf7506"}
{"level":"info","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05c62f7eaecbfa14939993ec52ec782713fc0574ab7923705baf47a3a3cf7506","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05c62f7eaecbfa14939993ec52ec782713fc0574ab7923705baf47a3a3cf7506","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05c62f7eaecbfa14939993ec52ec782713fc0574ab7923705baf47a3a3cf7506","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05c62f7eaecbfa14939993ec52ec782713fc0574ab7923705baf47a3a3cf7506"}
{"level":"debug","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05c62f7eaecbfa14939993ec52ec782713fc0574ab7923705baf47a3a3cf7506","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:32:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:32:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["05c62f7eaecbfa14939993ec52ec782713fc0574ab7923705baf47a3a3cf7506"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05c62f7eaecbfa14939993ec52ec782713fc0574ab7923705baf47a3a3cf7506","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05c62f7eaecbfa14939993ec52ec782713fc0574ab7923705baf47a3a3cf7506","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:32:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:32:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05c62f7eaecbfa14939993ec52ec782713fc0574ab7923705baf47a3a3cf7506"}
{"level":"info","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05c62f7eaecbfa14939993ec52ec782713fc0574ab7923705baf47a3a3cf7506","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05c62f7eaecbfa14939993ec52ec782713fc0574ab7923705baf47a3a3cf7506","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05c62f7eaecbfa14939993ec52ec782713fc0574ab7923705baf47a3a3cf7506","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05c62f7eaecbfa14939993ec52ec782713fc0574ab7923705baf47a3a3cf7506"}
{"level":"debug","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05c62f7eaecbfa14939993ec52ec782713fc0574ab7923705baf47a3a3cf7506","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:32:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:32:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["05c62f7eaecbfa14939993ec52ec782713fc0574ab7923705baf47a3a3cf7506"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05c62f7eaecbfa14939993ec52ec782713fc0574ab7923705baf47a3a3cf7506","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05c62f7eaecbfa14939993ec52ec782713fc0574ab7923705baf47a3a3cf7506","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:32:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:32:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05c62f7eaecbfa14939993ec52ec782713fc0574ab7923705baf47a3a3cf7506"}
{"level":"info","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05c62f7eaecbfa14939993ec52ec782713fc0574ab7923705baf47a3a3cf7506","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05c62f7eaecbfa14939993ec52ec782713fc0574ab7923705baf47a3a3cf7506","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05c62f7eaecbfa14939993ec52ec782713fc0574ab7923705baf47a3a3cf7506","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05c62f7eaecbfa14939993ec52ec782713fc0574ab7923705baf47a3a3cf7506"}
{"level":"debug","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05c62f7eaecbfa14939993ec52ec782713fc0574ab7923705baf47a3a3cf7506","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:32:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:32:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["05c62f7eaecbfa14939993ec52ec782713fc0574ab7923705baf47a3a3cf7506"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05c62f7eaecbfa14939993ec52ec782713fc0574ab7923705baf47a3a3cf7506","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21d69a1ed10fce789060b0a83bf961b131d35ed51cc186d8936ff98191b132b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:32:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:32:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21d69a1ed10fce789060b0a83bf961b131d35ed51cc186d8936ff98191b132b3"}
{"level":"info","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21d69a1ed10fce789060b0a83bf961b131d35ed51cc186d8936ff98191b132b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05c62f7eaecbfa14939993ec52ec782713fc0574ab7923705baf47a3a3cf7506","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:32:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:32:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05c62f7eaecbfa14939993ec52ec782713fc0574ab7923705baf47a3a3cf7506","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21d69a1ed10fce789060b0a83bf961b131d35ed51cc186d8936ff98191b132b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:32:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:32:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["21d69a1ed10fce789060b0a83bf961b131d35ed51cc186d8936ff98191b132b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05c62f7eaecbfa14939993ec52ec782713fc0574ab7923705baf47a3a3cf7506"}
{"level":"info","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21d69a1ed10fce789060b0a83bf961b131d35ed51cc186d8936ff98191b132b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05c62f7eaecbfa14939993ec52ec782713fc0574ab7923705baf47a3a3cf7506","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:32:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:32:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["05c62f7eaecbfa14939993ec52ec782713fc0574ab7923705baf47a3a3cf7506"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21d69a1ed10fce789060b0a83bf961b131d35ed51cc186d8936ff98191b132b3"}
{"level":"info","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05c62f7eaecbfa14939993ec52ec782713fc0574ab7923705baf47a3a3cf7506","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21d69a1ed10fce789060b0a83bf961b131d35ed51cc186d8936ff98191b132b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05c62f7eaecbfa14939993ec52ec782713fc0574ab7923705baf47a3a3cf7506","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:32:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:32:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05c62f7eaecbfa14939993ec52ec782713fc0574ab7923705baf47a3a3cf7506"}
{"level":"info","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05c62f7eaecbfa14939993ec52ec782713fc0574ab7923705baf47a3a3cf7506","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05c62f7eaecbfa14939993ec52ec782713fc0574ab7923705baf47a3a3cf7506","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:32:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:32:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["05c62f7eaecbfa14939993ec52ec782713fc0574ab7923705baf47a3a3cf7506"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05c62f7eaecbfa14939993ec52ec782713fc0574ab7923705baf47a3a3cf7506","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ecf638aa1fb036db0c8cc5428ab76a7c307add3186de8d07da708a96273870d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:32:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:32:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21d69a1ed10fce789060b0a83bf961b131d35ed51cc186d8936ff98191b132b3"}
{"level":"info","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05c62f7eaecbfa14939993ec52ec782713fc0574ab7923705baf47a3a3cf7506"}
{"level":"info","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ecf638aa1fb036db0c8cc5428ab76a7c307add3186de8d07da708a96273870d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05c62f7eaecbfa14939993ec52ec782713fc0574ab7923705baf47a3a3cf7506","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ecf638aa1fb036db0c8cc5428ab76a7c307add3186de8d07da708a96273870d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:32:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:32:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ecf638aa1fb036db0c8cc5428ab76a7c307add3186de8d07da708a96273870d"}
{"level":"info","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ecf638aa1fb036db0c8cc5428ab76a7c307add3186de8d07da708a96273870d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ecf638aa1fb036db0c8cc5428ab76a7c307add3186de8d07da708a96273870d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:32:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:32:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ecf638aa1fb036db0c8cc5428ab76a7c307add3186de8d07da708a96273870d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ecf638aa1fb036db0c8cc5428ab76a7c307add3186de8d07da708a96273870d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ecf638aa1fb036db0c8cc5428ab76a7c307add3186de8d07da708a96273870d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:32:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:32:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ecf638aa1fb036db0c8cc5428ab76a7c307add3186de8d07da708a96273870d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05c62f7eaecbfa14939993ec52ec782713fc0574ab7923705baf47a3a3cf7506"}
{"level":"error","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6ecf638aa1fb036db0c8cc5428ab76a7c307add3186de8d07da708a96273870d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6ecf638aa1fb036db0c8cc5428ab76a7c307add3186de8d07da708a96273870d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ecf638aa1fb036db0c8cc5428ab76a7c307add3186de8d07da708a96273870d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:32:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:32:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ecf638aa1fb036db0c8cc5428ab76a7c307add3186de8d07da708a96273870d"}
{"level":"info","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ecf638aa1fb036db0c8cc5428ab76a7c307add3186de8d07da708a96273870d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a2f760ed2758480c11db8f5d6d7a944d406f6b03b8e5b9eb08ce0ef1081ad37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:32:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:32:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a2f760ed2758480c11db8f5d6d7a944d406f6b03b8e5b9eb08ce0ef1081ad37"}
{"level":"info","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a2f760ed2758480c11db8f5d6d7a944d406f6b03b8e5b9eb08ce0ef1081ad37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ecf638aa1fb036db0c8cc5428ab76a7c307add3186de8d07da708a96273870d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a2f760ed2758480c11db8f5d6d7a944d406f6b03b8e5b9eb08ce0ef1081ad37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:32:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:32:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a2f760ed2758480c11db8f5d6d7a944d406f6b03b8e5b9eb08ce0ef1081ad37"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ecf638aa1fb036db0c8cc5428ab76a7c307add3186de8d07da708a96273870d"}
{"level":"info","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a2f760ed2758480c11db8f5d6d7a944d406f6b03b8e5b9eb08ce0ef1081ad37"}
{"level":"info","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a2f760ed2758480c11db8f5d6d7a944d406f6b03b8e5b9eb08ce0ef1081ad37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ecf638aa1fb036db0c8cc5428ab76a7c307add3186de8d07da708a96273870d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:32:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:32:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ecf638aa1fb036db0c8cc5428ab76a7c307add3186de8d07da708a96273870d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adfa68f097b8d415455e34f3cf2dcca0f591d0505da060f4ceb32a35dd1dc2c3"}
{"level":"info","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ecf638aa1fb036db0c8cc5428ab76a7c307add3186de8d07da708a96273870d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adfa68f097b8d415455e34f3cf2dcca0f591d0505da060f4ceb32a35dd1dc2c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:32:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:32:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["adfa68f097b8d415455e34f3cf2dcca0f591d0505da060f4ceb32a35dd1dc2c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a2f760ed2758480c11db8f5d6d7a944d406f6b03b8e5b9eb08ce0ef1081ad37"}
{"level":"info","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ecf638aa1fb036db0c8cc5428ab76a7c307add3186de8d07da708a96273870d"}
{"level":"info","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adfa68f097b8d415455e34f3cf2dcca0f591d0505da060f4ceb32a35dd1dc2c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a2f760ed2758480c11db8f5d6d7a944d406f6b03b8e5b9eb08ce0ef1081ad37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ecf638aa1fb036db0c8cc5428ab76a7c307add3186de8d07da708a96273870d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adfa68f097b8d415455e34f3cf2dcca0f591d0505da060f4ceb32a35dd1dc2c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:32:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:32:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adfa68f097b8d415455e34f3cf2dcca0f591d0505da060f4ceb32a35dd1dc2c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"165a7b07a2ca8fabd3fe37506f7c1ed964f402ba526d0d91cd29be9d78527e04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:32:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:32:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adfa68f097b8d415455e34f3cf2dcca0f591d0505da060f4ceb32a35dd1dc2c3"}
{"level":"info","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"165a7b07a2ca8fabd3fe37506f7c1ed964f402ba526d0d91cd29be9d78527e04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adfa68f097b8d415455e34f3cf2dcca0f591d0505da060f4ceb32a35dd1dc2c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:32:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:32:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["adfa68f097b8d415455e34f3cf2dcca0f591d0505da060f4ceb32a35dd1dc2c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/165a7b07a2ca8fabd3fe37506f7c1ed964f402ba526d0d91cd29be9d78527e04"}
{"level":"info","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adfa68f097b8d415455e34f3cf2dcca0f591d0505da060f4ceb32a35dd1dc2c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f56139354cf88bd8b2e3e465bf1a36981ee1f6c0917ed423327d33af88a76cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:32:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:32:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f56139354cf88bd8b2e3e465bf1a36981ee1f6c0917ed423327d33af88a76cb"}
{"level":"info","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f56139354cf88bd8b2e3e465bf1a36981ee1f6c0917ed423327d33af88a76cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"165a7b07a2ca8fabd3fe37506f7c1ed964f402ba526d0d91cd29be9d78527e04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:32:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:32:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["165a7b07a2ca8fabd3fe37506f7c1ed964f402ba526d0d91cd29be9d78527e04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adfa68f097b8d415455e34f3cf2dcca0f591d0505da060f4ceb32a35dd1dc2c3"}
{"level":"info","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"165a7b07a2ca8fabd3fe37506f7c1ed964f402ba526d0d91cd29be9d78527e04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adfa68f097b8d415455e34f3cf2dcca0f591d0505da060f4ceb32a35dd1dc2c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f56139354cf88bd8b2e3e465bf1a36981ee1f6c0917ed423327d33af88a76cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:32:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:32:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f56139354cf88bd8b2e3e465bf1a36981ee1f6c0917ed423327d33af88a76cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/165a7b07a2ca8fabd3fe37506f7c1ed964f402ba526d0d91cd29be9d78527e04"}
{"level":"info","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f56139354cf88bd8b2e3e465bf1a36981ee1f6c0917ed423327d33af88a76cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"165a7b07a2ca8fabd3fe37506f7c1ed964f402ba526d0d91cd29be9d78527e04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29a9b58b7849198fd5932f09e9ef117905a5508ec069aeda28d6e3ddc2ed2541","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:32:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:32:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f56139354cf88bd8b2e3e465bf1a36981ee1f6c0917ed423327d33af88a76cb"}
{"level":"info","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29a9b58b7849198fd5932f09e9ef117905a5508ec069aeda28d6e3ddc2ed2541","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f56139354cf88bd8b2e3e465bf1a36981ee1f6c0917ed423327d33af88a76cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29a9b58b7849198fd5932f09e9ef117905a5508ec069aeda28d6e3ddc2ed2541","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:32:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:32:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29a9b58b7849198fd5932f09e9ef117905a5508ec069aeda28d6e3ddc2ed2541"}
{"level":"info","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29a9b58b7849198fd5932f09e9ef117905a5508ec069aeda28d6e3ddc2ed2541","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29a9b58b7849198fd5932f09e9ef117905a5508ec069aeda28d6e3ddc2ed2541","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:32:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:32:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29a9b58b7849198fd5932f09e9ef117905a5508ec069aeda28d6e3ddc2ed2541"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"29a9b58b7849198fd5932f09e9ef117905a5508ec069aeda28d6e3ddc2ed2541","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"29a9b58b7849198fd5932f09e9ef117905a5508ec069aeda28d6e3ddc2ed2541\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29a9b58b7849198fd5932f09e9ef117905a5508ec069aeda28d6e3ddc2ed2541","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:32:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:32:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29a9b58b7849198fd5932f09e9ef117905a5508ec069aeda28d6e3ddc2ed2541"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/165a7b07a2ca8fabd3fe37506f7c1ed964f402ba526d0d91cd29be9d78527e04"}
{"level":"info","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29a9b58b7849198fd5932f09e9ef117905a5508ec069aeda28d6e3ddc2ed2541","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29a9b58b7849198fd5932f09e9ef117905a5508ec069aeda28d6e3ddc2ed2541","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29a9b58b7849198fd5932f09e9ef117905a5508ec069aeda28d6e3ddc2ed2541","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f56139354cf88bd8b2e3e465bf1a36981ee1f6c0917ed423327d33af88a76cb"}
{"level":"info","ts":"2026-07-07T18:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29a9b58b7849198fd5932f09e9ef117905a5508ec069aeda28d6e3ddc2ed2541"}
{"level":"debug","ts":"2026-07-07T18:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"165a7b07a2ca8fabd3fe37506f7c1ed964f402ba526d0d91cd29be9d78527e04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:33:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:33:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/165a7b07a2ca8fabd3fe37506f7c1ed964f402ba526d0d91cd29be9d78527e04"}
{"level":"info","ts":"2026-07-07T18:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"165a7b07a2ca8fabd3fe37506f7c1ed964f402ba526d0d91cd29be9d78527e04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"165a7b07a2ca8fabd3fe37506f7c1ed964f402ba526d0d91cd29be9d78527e04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"165a7b07a2ca8fabd3fe37506f7c1ed964f402ba526d0d91cd29be9d78527e04","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/165a7b07a2ca8fabd3fe37506f7c1ed964f402ba526d0d91cd29be9d78527e04"}
{"level":"debug","ts":"2026-07-07T18:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"165a7b07a2ca8fabd3fe37506f7c1ed964f402ba526d0d91cd29be9d78527e04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:33:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:33:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["165a7b07a2ca8fabd3fe37506f7c1ed964f402ba526d0d91cd29be9d78527e04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"165a7b07a2ca8fabd3fe37506f7c1ed964f402ba526d0d91cd29be9d78527e04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"165a7b07a2ca8fabd3fe37506f7c1ed964f402ba526d0d91cd29be9d78527e04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:33:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:33:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"165a7b07a2ca8fabd3fe37506f7c1ed964f402ba526d0d91cd29be9d78527e04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"165a7b07a2ca8fabd3fe37506f7c1ed964f402ba526d0d91cd29be9d78527e04","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/165a7b07a2ca8fabd3fe37506f7c1ed964f402ba526d0d91cd29be9d78527e04"}
{"level":"debug","ts":"2026-07-07T18:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"165a7b07a2ca8fabd3fe37506f7c1ed964f402ba526d0d91cd29be9d78527e04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"165a7b07a2ca8fabd3fe37506f7c1ed964f402ba526d0d91cd29be9d78527e04","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/165a7b07a2ca8fabd3fe37506f7c1ed964f402ba526d0d91cd29be9d78527e04"}
{"level":"debug","ts":"2026-07-07T18:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"165a7b07a2ca8fabd3fe37506f7c1ed964f402ba526d0d91cd29be9d78527e04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:33:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:33:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["165a7b07a2ca8fabd3fe37506f7c1ed964f402ba526d0d91cd29be9d78527e04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"165a7b07a2ca8fabd3fe37506f7c1ed964f402ba526d0d91cd29be9d78527e04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"165a7b07a2ca8fabd3fe37506f7c1ed964f402ba526d0d91cd29be9d78527e04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6840e777cd24484d78eb8d81cd39abcdbd015c509208ddc473c2a97c9554d6e8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/165a7b07a2ca8fabd3fe37506f7c1ed964f402ba526d0d91cd29be9d78527e04"}
{"level":"info","ts":"2026-07-07T18:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6840e777cd24484d78eb8d81cd39abcdbd015c509208ddc473c2a97c9554d6e8"}
{"level":"debug","ts":"2026-07-07T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21d69a1ed10fce789060b0a83bf961b131d35ed51cc186d8936ff98191b132b3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21d69a1ed10fce789060b0a83bf961b131d35ed51cc186d8936ff98191b132b3"}
{"level":"debug","ts":"2026-07-07T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a2f760ed2758480c11db8f5d6d7a944d406f6b03b8e5b9eb08ce0ef1081ad37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:33:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:33:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a2f760ed2758480c11db8f5d6d7a944d406f6b03b8e5b9eb08ce0ef1081ad37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a2f760ed2758480c11db8f5d6d7a944d406f6b03b8e5b9eb08ce0ef1081ad37","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a2f760ed2758480c11db8f5d6d7a944d406f6b03b8e5b9eb08ce0ef1081ad37"}
{"level":"debug","ts":"2026-07-07T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a2f760ed2758480c11db8f5d6d7a944d406f6b03b8e5b9eb08ce0ef1081ad37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a2f760ed2758480c11db8f5d6d7a944d406f6b03b8e5b9eb08ce0ef1081ad37","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a2f760ed2758480c11db8f5d6d7a944d406f6b03b8e5b9eb08ce0ef1081ad37"}
{"level":"debug","ts":"2026-07-07T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a2f760ed2758480c11db8f5d6d7a944d406f6b03b8e5b9eb08ce0ef1081ad37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:33:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:33:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a2f760ed2758480c11db8f5d6d7a944d406f6b03b8e5b9eb08ce0ef1081ad37"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a2f760ed2758480c11db8f5d6d7a944d406f6b03b8e5b9eb08ce0ef1081ad37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd8aae53cd7ff08f3e985856d506fb9f0f73bb2f963ab19f0c7dabe52b198bd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:33:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:33:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd8aae53cd7ff08f3e985856d506fb9f0f73bb2f963ab19f0c7dabe52b198bd8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a2f760ed2758480c11db8f5d6d7a944d406f6b03b8e5b9eb08ce0ef1081ad37","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd8aae53cd7ff08f3e985856d506fb9f0f73bb2f963ab19f0c7dabe52b198bd8"}
{"level":"debug","ts":"2026-07-07T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd8aae53cd7ff08f3e985856d506fb9f0f73bb2f963ab19f0c7dabe52b198bd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:33:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:33:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd8aae53cd7ff08f3e985856d506fb9f0f73bb2f963ab19f0c7dabe52b198bd8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd8aae53cd7ff08f3e985856d506fb9f0f73bb2f963ab19f0c7dabe52b198bd8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd8aae53cd7ff08f3e985856d506fb9f0f73bb2f963ab19f0c7dabe52b198bd8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a2f760ed2758480c11db8f5d6d7a944d406f6b03b8e5b9eb08ce0ef1081ad37"}
{"level":"info","ts":"2026-07-07T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd8aae53cd7ff08f3e985856d506fb9f0f73bb2f963ab19f0c7dabe52b198bd8"}
{"level":"debug","ts":"2026-07-07T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29a9b58b7849198fd5932f09e9ef117905a5508ec069aeda28d6e3ddc2ed2541","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:33:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:33:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29a9b58b7849198fd5932f09e9ef117905a5508ec069aeda28d6e3ddc2ed2541","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29a9b58b7849198fd5932f09e9ef117905a5508ec069aeda28d6e3ddc2ed2541","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29a9b58b7849198fd5932f09e9ef117905a5508ec069aeda28d6e3ddc2ed2541"}
{"level":"debug","ts":"2026-07-07T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29a9b58b7849198fd5932f09e9ef117905a5508ec069aeda28d6e3ddc2ed2541","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29a9b58b7849198fd5932f09e9ef117905a5508ec069aeda28d6e3ddc2ed2541","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29a9b58b7849198fd5932f09e9ef117905a5508ec069aeda28d6e3ddc2ed2541"}
{"level":"debug","ts":"2026-07-07T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29a9b58b7849198fd5932f09e9ef117905a5508ec069aeda28d6e3ddc2ed2541","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:33:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:33:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29a9b58b7849198fd5932f09e9ef117905a5508ec069aeda28d6e3ddc2ed2541"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29a9b58b7849198fd5932f09e9ef117905a5508ec069aeda28d6e3ddc2ed2541","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a30514bb9fb2e5c3795f74c9017e5be227d0157ac9a708eedbe5ebede08251f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:33:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:33:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a30514bb9fb2e5c3795f74c9017e5be227d0157ac9a708eedbe5ebede08251f2"}
{"level":"info","ts":"2026-07-07T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a30514bb9fb2e5c3795f74c9017e5be227d0157ac9a708eedbe5ebede08251f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29a9b58b7849198fd5932f09e9ef117905a5508ec069aeda28d6e3ddc2ed2541","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:33:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:33:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29a9b58b7849198fd5932f09e9ef117905a5508ec069aeda28d6e3ddc2ed2541"}
{"level":"info","ts":"2026-07-07T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29a9b58b7849198fd5932f09e9ef117905a5508ec069aeda28d6e3ddc2ed2541","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a30514bb9fb2e5c3795f74c9017e5be227d0157ac9a708eedbe5ebede08251f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29a9b58b7849198fd5932f09e9ef117905a5508ec069aeda28d6e3ddc2ed2541","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:33:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:33:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29a9b58b7849198fd5932f09e9ef117905a5508ec069aeda28d6e3ddc2ed2541"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29a9b58b7849198fd5932f09e9ef117905a5508ec069aeda28d6e3ddc2ed2541","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a30514bb9fb2e5c3795f74c9017e5be227d0157ac9a708eedbe5ebede08251f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29a9b58b7849198fd5932f09e9ef117905a5508ec069aeda28d6e3ddc2ed2541","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:33:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:33:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29a9b58b7849198fd5932f09e9ef117905a5508ec069aeda28d6e3ddc2ed2541"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a30514bb9fb2e5c3795f74c9017e5be227d0157ac9a708eedbe5ebede08251f2"}
{"level":"error","ts":"2026-07-07T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"29a9b58b7849198fd5932f09e9ef117905a5508ec069aeda28d6e3ddc2ed2541","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"29a9b58b7849198fd5932f09e9ef117905a5508ec069aeda28d6e3ddc2ed2541\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29a9b58b7849198fd5932f09e9ef117905a5508ec069aeda28d6e3ddc2ed2541","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:33:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:33:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29a9b58b7849198fd5932f09e9ef117905a5508ec069aeda28d6e3ddc2ed2541"}
{"level":"info","ts":"2026-07-07T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29a9b58b7849198fd5932f09e9ef117905a5508ec069aeda28d6e3ddc2ed2541","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a30514bb9fb2e5c3795f74c9017e5be227d0157ac9a708eedbe5ebede08251f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:33:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:33:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a30514bb9fb2e5c3795f74c9017e5be227d0157ac9a708eedbe5ebede08251f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a30514bb9fb2e5c3795f74c9017e5be227d0157ac9a708eedbe5ebede08251f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29a9b58b7849198fd5932f09e9ef117905a5508ec069aeda28d6e3ddc2ed2541","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9c182abb05589fdaa6e7edcd0ea6244e050db80029590e554912f7cd441591f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a30514bb9fb2e5c3795f74c9017e5be227d0157ac9a708eedbe5ebede08251f2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29a9b58b7849198fd5932f09e9ef117905a5508ec069aeda28d6e3ddc2ed2541"}
{"level":"debug","ts":"2026-07-07T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c7d4e41ddb1bd416f2d5908a7bb8464816d48c020133e80633d04485d41709e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29a9b58b7849198fd5932f09e9ef117905a5508ec069aeda28d6e3ddc2ed2541","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:33:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:33:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29a9b58b7849198fd5932f09e9ef117905a5508ec069aeda28d6e3ddc2ed2541"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29a9b58b7849198fd5932f09e9ef117905a5508ec069aeda28d6e3ddc2ed2541","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"928628794017ceb2d915d407b1c5088cbd972ace6ceba1f911e25327bc4ec534","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29a9b58b7849198fd5932f09e9ef117905a5508ec069aeda28d6e3ddc2ed2541","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9c182abb05589fdaa6e7edcd0ea6244e050db80029590e554912f7cd441591f"}
{"level":"debug","ts":"2026-07-07T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"341df337fdb6c76c4667771ef7ebc010ac902630d235c1f08796b3a0ae031283","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a30514bb9fb2e5c3795f74c9017e5be227d0157ac9a708eedbe5ebede08251f2"}
{"level":"debug","ts":"2026-07-07T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adfa68f097b8d415455e34f3cf2dcca0f591d0505da060f4ceb32a35dd1dc2c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05c62f7eaecbfa14939993ec52ec782713fc0574ab7923705baf47a3a3cf7506","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c7d4e41ddb1bd416f2d5908a7bb8464816d48c020133e80633d04485d41709e"}
{"level":"debug","ts":"2026-07-07T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f56139354cf88bd8b2e3e465bf1a36981ee1f6c0917ed423327d33af88a76cb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/928628794017ceb2d915d407b1c5088cbd972ace6ceba1f911e25327bc4ec534"}
{"level":"info","ts":"2026-07-07T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29a9b58b7849198fd5932f09e9ef117905a5508ec069aeda28d6e3ddc2ed2541"}
{"level":"debug","ts":"2026-07-07T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ecf638aa1fb036db0c8cc5428ab76a7c307add3186de8d07da708a96273870d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/341df337fdb6c76c4667771ef7ebc010ac902630d235c1f08796b3a0ae031283"}
{"level":"debug","ts":"2026-07-07T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0e77e1b242a2e8ce653204f048f95c96ab030427cf3d2b4d72a311dfbfb3ee1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb56ebc3dc1bef3acf1b5f212a4fd527114fe3f0d9d7d13a1b0b27f0b3a34c57","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adfa68f097b8d415455e34f3cf2dcca0f591d0505da060f4ceb32a35dd1dc2c3"}
{"level":"debug","ts":"2026-07-07T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"12df09ec89ff6371979d04bad5927e2d885a26207605cd9449ba110f5c45eed6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05c62f7eaecbfa14939993ec52ec782713fc0574ab7923705baf47a3a3cf7506"}
{"level":"debug","ts":"2026-07-07T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2a5e11ae39603c2d0253569e6ab0ddad2345e9a7b984892bbda9c575b104859","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f56139354cf88bd8b2e3e465bf1a36981ee1f6c0917ed423327d33af88a76cb"}
{"level":"debug","ts":"2026-07-07T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55706dadc1e5ef6f3713a7b7acbe3604b80c1683d4341c65e7359ee9042cfe21","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ecf638aa1fb036db0c8cc5428ab76a7c307add3186de8d07da708a96273870d"}
{"level":"info","ts":"2026-07-07T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0e77e1b242a2e8ce653204f048f95c96ab030427cf3d2b4d72a311dfbfb3ee1"}
{"level":"info","ts":"2026-07-07T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb56ebc3dc1bef3acf1b5f212a4fd527114fe3f0d9d7d13a1b0b27f0b3a34c57"}
{"level":"info","ts":"2026-07-07T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12df09ec89ff6371979d04bad5927e2d885a26207605cd9449ba110f5c45eed6"}
{"level":"info","ts":"2026-07-07T18:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2a5e11ae39603c2d0253569e6ab0ddad2345e9a7b984892bbda9c575b104859"}
{"level":"info","ts":"2026-07-07T18:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55706dadc1e5ef6f3713a7b7acbe3604b80c1683d4341c65e7359ee9042cfe21"}
{"level":"info","ts":"2026-07-07T18:33:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"44d2aed5-e0c4-41a7-a80d-bb2af9e2a897","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:46088","PortSpecifier":{"PortValue":46088}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"44d2aed5-e0c4-41a7-a80d-bb2af9e2a897","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2b5160.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:33:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"44d2aed5-e0c4-41a7-a80d-bb2af9e2a897","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:46088","PortSpecifier":{"PortValue":46088}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783449218,"nanos":514605657},"http":{"id":"44d2aed5-e0c4-41a7-a80d-bb2af9e2a897","method":"POST","headers":{":authority":"e2e-shared-a-2b5160.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:33:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"44d2aed5-e0c4-41a7-a80d-bb2af9e2a897","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T18:33:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"44d2aed5-e0c4-41a7-a80d-bb2af9e2a897","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"13165771-7ad0-4fee-91b3-c3ee0a976429","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d354d02-b562-46f4-8cbc-cd983e35664b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/67bf82c58916"]}}
{"level":"debug","ts":"2026-07-07T18:33:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"44d2aed5-e0c4-41a7-a80d-bb2af9e2a897","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/67bf82c58916"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d354d02-b562-46f4-8cbc-cd983e35664b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"13165771-7ad0-4fee-91b3-c3ee0a976429","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6c7d4e41ddb1bd416f2d5908a7bb8464816d48c020133e80633d04485d41709e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2b5160.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:33:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44d2aed5-e0c4-41a7-a80d-bb2af9e2a897","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:33:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44d2aed5-e0c4-41a7-a80d-bb2af9e2a897","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:33:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44d2aed5-e0c4-41a7-a80d-bb2af9e2a897","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2b5160/sub-test-model-2b5160\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:33:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"44d2aed5-e0c4-41a7-a80d-bb2af9e2a897","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T18:33:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44d2aed5-e0c4-41a7-a80d-bb2af9e2a897","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T18:33:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44d2aed5-e0c4-41a7-a80d-bb2af9e2a897","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T18:33:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"44d2aed5-e0c4-41a7-a80d-bb2af9e2a897","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:33:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"44d2aed5-e0c4-41a7-a80d-bb2af9e2a897","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:33:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9acb51c0-acc1-4011-859d-9ee8e7be6504","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:43504","PortSpecifier":{"PortValue":43504}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9acb51c0-acc1-4011-859d-9ee8e7be6504","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-200b05.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:33:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9acb51c0-acc1-4011-859d-9ee8e7be6504","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:43504","PortSpecifier":{"PortValue":43504}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783449218,"nanos":557834470},"http":{"id":"9acb51c0-acc1-4011-859d-9ee8e7be6504","method":"POST","headers":{":authority":"e2e-shared-b-200b05.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:33:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9acb51c0-acc1-4011-859d-9ee8e7be6504","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T18:33:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9acb51c0-acc1-4011-859d-9ee8e7be6504","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"13165771-7ad0-4fee-91b3-c3ee0a976429","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d354d02-b562-46f4-8cbc-cd983e35664b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/67bf82c58916"]}}
{"level":"debug","ts":"2026-07-07T18:33:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9acb51c0-acc1-4011-859d-9ee8e7be6504","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/67bf82c58916"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d354d02-b562-46f4-8cbc-cd983e35664b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"13165771-7ad0-4fee-91b3-c3ee0a976429","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a9c182abb05589fdaa6e7edcd0ea6244e050db80029590e554912f7cd441591f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-200b05.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:33:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9acb51c0-acc1-4011-859d-9ee8e7be6504","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:33:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9acb51c0-acc1-4011-859d-9ee8e7be6504","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:33:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9acb51c0-acc1-4011-859d-9ee8e7be6504","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-200b05/sub-test-model-200b05\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:33:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9acb51c0-acc1-4011-859d-9ee8e7be6504","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T18:33:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9acb51c0-acc1-4011-859d-9ee8e7be6504","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T18:33:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9acb51c0-acc1-4011-859d-9ee8e7be6504","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T18:33:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9acb51c0-acc1-4011-859d-9ee8e7be6504","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:33:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9acb51c0-acc1-4011-859d-9ee8e7be6504","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:33:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"107ac6d0-4c9a-4457-9466-b41b9e1855bf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:46094","PortSpecifier":{"PortValue":46094}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"107ac6d0-4c9a-4457-9466-b41b9e1855bf","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-2b5160.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:33:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"107ac6d0-4c9a-4457-9466-b41b9e1855bf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:46094","PortSpecifier":{"PortValue":46094}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783449218,"nanos":605666968},"http":{"id":"107ac6d0-4c9a-4457-9466-b41b9e1855bf","method":"GET","headers":{":authority":"e2e-shared-a-2b5160.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:33:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"107ac6d0-4c9a-4457-9466-b41b9e1855bf","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-n2Q9ZeALv2itQ9cH_TQBPFphC04NVOxDvaifKMllfyWYHCrbiF4AMAu2Y62O"}
{"level":"debug","ts":"2026-07-07T18:33:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"107ac6d0-4c9a-4457-9466-b41b9e1855bf","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2b5160.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-n2Q9ZeALv2itQ9cH_TQBPFphC04NVOxDvaifKMllfyWYHCrbiF4AMAu2Y62O\"}"}
{"level":"debug","ts":"2026-07-07T18:33:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"107ac6d0-4c9a-4457-9466-b41b9e1855bf","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2b5160.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"34e9c5e6-09a9-42b3-9bf7-12cde8119b6c","keyName":"e2e-sub-iso-a54380","subscription":"e2e-a-only-7843b7","tenant":"e2e-shared-a-2b5160","userId":"34e9c5e6-09a9-42b3-9bf7-12cde8119b6c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T18:33:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"107ac6d0-4c9a-4457-9466-b41b9e1855bf","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:33:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"107ac6d0-4c9a-4457-9466-b41b9e1855bf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:33:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"107ac6d0-4c9a-4457-9466-b41b9e1855bf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:33:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"107ac6d0-4c9a-4457-9466-b41b9e1855bf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2b5160/sub-test-model-2b5160\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:33:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"107ac6d0-4c9a-4457-9466-b41b9e1855bf","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T18:33:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"107ac6d0-4c9a-4457-9466-b41b9e1855bf","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-7843b7"}
{"level":"debug","ts":"2026-07-07T18:33:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"107ac6d0-4c9a-4457-9466-b41b9e1855bf","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T18:33:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"107ac6d0-4c9a-4457-9466-b41b9e1855bf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-07T18:33:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"107ac6d0-4c9a-4457-9466-b41b9e1855bf","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:33:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"107ac6d0-4c9a-4457-9466-b41b9e1855bf","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:33:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9dc181eb-c930-465c-8711-df925679a254","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:43516","PortSpecifier":{"PortValue":43516}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9dc181eb-c930-465c-8711-df925679a254","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-200b05.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:33:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9dc181eb-c930-465c-8711-df925679a254","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:43516","PortSpecifier":{"PortValue":43516}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783449218,"nanos":653042005},"http":{"id":"9dc181eb-c930-465c-8711-df925679a254","method":"GET","headers":{":authority":"e2e-shared-b-200b05.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:33:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9dc181eb-c930-465c-8711-df925679a254","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-j0GwusttJMooCxUE_79f3goERFiKqwEd8qyTDJ0agsKApYZjO7v2ihmkNnfF"}
{"level":"debug","ts":"2026-07-07T18:33:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9dc181eb-c930-465c-8711-df925679a254","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-200b05.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-j0GwusttJMooCxUE_79f3goERFiKqwEd8qyTDJ0agsKApYZjO7v2ihmkNnfF\"}"}
{"level":"debug","ts":"2026-07-07T18:33:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9dc181eb-c930-465c-8711-df925679a254","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-200b05.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"bc8dcf2c-2e9a-4268-99de-6bda4588fad9","keyName":"e2e-sub-iso-164e23","subscription":"e2e-b-only-7843b7","tenant":"e2e-shared-b-200b05","userId":"bc8dcf2c-2e9a-4268-99de-6bda4588fad9","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T18:33:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9dc181eb-c930-465c-8711-df925679a254","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:33:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9dc181eb-c930-465c-8711-df925679a254","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:33:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9dc181eb-c930-465c-8711-df925679a254","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:33:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9dc181eb-c930-465c-8711-df925679a254","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-200b05/sub-test-model-200b05\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:33:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9dc181eb-c930-465c-8711-df925679a254","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T18:33:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9dc181eb-c930-465c-8711-df925679a254","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-7843b7"}
{"level":"debug","ts":"2026-07-07T18:33:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9dc181eb-c930-465c-8711-df925679a254","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T18:33:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9dc181eb-c930-465c-8711-df925679a254","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T18:33:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9dc181eb-c930-465c-8711-df925679a254","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:33:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9dc181eb-c930-465c-8711-df925679a254","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:33:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5624f4cf-bbeb-46ca-8a75-020185a220fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:49918","PortSpecifier":{"PortValue":49918}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5624f4cf-bbeb-46ca-8a75-020185a220fb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2b5160.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:33:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5624f4cf-bbeb-46ca-8a75-020185a220fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:49918","PortSpecifier":{"PortValue":49918}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783449237,"nanos":374227539},"http":{"id":"5624f4cf-bbeb-46ca-8a75-020185a220fb","method":"POST","headers":{":authority":"e2e-shared-a-2b5160.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:33:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5624f4cf-bbeb-46ca-8a75-020185a220fb","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T18:33:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5624f4cf-bbeb-46ca-8a75-020185a220fb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"13165771-7ad0-4fee-91b3-c3ee0a976429","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d354d02-b562-46f4-8cbc-cd983e35664b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/67bf82c58916"]}}
{"level":"debug","ts":"2026-07-07T18:33:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5624f4cf-bbeb-46ca-8a75-020185a220fb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/67bf82c58916"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d354d02-b562-46f4-8cbc-cd983e35664b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"13165771-7ad0-4fee-91b3-c3ee0a976429","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6c7d4e41ddb1bd416f2d5908a7bb8464816d48c020133e80633d04485d41709e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2b5160.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:33:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5624f4cf-bbeb-46ca-8a75-020185a220fb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:33:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5624f4cf-bbeb-46ca-8a75-020185a220fb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:33:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5624f4cf-bbeb-46ca-8a75-020185a220fb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2b5160/sub-test-model-2b5160\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:33:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5624f4cf-bbeb-46ca-8a75-020185a220fb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T18:33:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5624f4cf-bbeb-46ca-8a75-020185a220fb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T18:33:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5624f4cf-bbeb-46ca-8a75-020185a220fb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T18:33:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5624f4cf-bbeb-46ca-8a75-020185a220fb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:33:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5624f4cf-bbeb-46ca-8a75-020185a220fb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:33:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7eeea5d5-516b-4ef0-996a-7093819d934c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:43488","PortSpecifier":{"PortValue":43488}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7eeea5d5-516b-4ef0-996a-7093819d934c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-200b05.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:33:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7eeea5d5-516b-4ef0-996a-7093819d934c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:43488","PortSpecifier":{"PortValue":43488}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783449237,"nanos":415989311},"http":{"id":"7eeea5d5-516b-4ef0-996a-7093819d934c","method":"POST","headers":{":authority":"e2e-shared-b-200b05.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:33:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7eeea5d5-516b-4ef0-996a-7093819d934c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T18:33:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7eeea5d5-516b-4ef0-996a-7093819d934c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"13165771-7ad0-4fee-91b3-c3ee0a976429","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d354d02-b562-46f4-8cbc-cd983e35664b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/67bf82c58916"]}}
{"level":"debug","ts":"2026-07-07T18:33:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7eeea5d5-516b-4ef0-996a-7093819d934c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/67bf82c58916"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d354d02-b562-46f4-8cbc-cd983e35664b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"13165771-7ad0-4fee-91b3-c3ee0a976429","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a9c182abb05589fdaa6e7edcd0ea6244e050db80029590e554912f7cd441591f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-200b05.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:33:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7eeea5d5-516b-4ef0-996a-7093819d934c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:33:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7eeea5d5-516b-4ef0-996a-7093819d934c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:33:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7eeea5d5-516b-4ef0-996a-7093819d934c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-200b05/sub-test-model-200b05\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:33:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7eeea5d5-516b-4ef0-996a-7093819d934c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T18:33:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7eeea5d5-516b-4ef0-996a-7093819d934c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T18:33:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7eeea5d5-516b-4ef0-996a-7093819d934c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T18:33:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7eeea5d5-516b-4ef0-996a-7093819d934c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:33:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7eeea5d5-516b-4ef0-996a-7093819d934c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:33:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"350f68c3-08f7-46b8-8302-6e58811cecc9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:49934","PortSpecifier":{"PortValue":49934}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"350f68c3-08f7-46b8-8302-6e58811cecc9","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-2b5160.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:33:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"350f68c3-08f7-46b8-8302-6e58811cecc9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:49934","PortSpecifier":{"PortValue":49934}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783449237,"nanos":449710150},"http":{"id":"350f68c3-08f7-46b8-8302-6e58811cecc9","method":"POST","headers":{":authority":"e2e-shared-a-2b5160.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:33:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"350f68c3-08f7-46b8-8302-6e58811cecc9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Zw6BjBDe00z9uKrn_ZA4Ua4P4RHL5udOoqQu34CCIhBPP5gpUwXKZLMElBKi"}
{"level":"debug","ts":"2026-07-07T18:33:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"350f68c3-08f7-46b8-8302-6e58811cecc9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2b5160.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Zw6BjBDe00z9uKrn_ZA4Ua4P4RHL5udOoqQu34CCIhBPP5gpUwXKZLMElBKi\"}"}
{"level":"debug","ts":"2026-07-07T18:33:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"350f68c3-08f7-46b8-8302-6e58811cecc9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2b5160.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8396166d-1b54-4bec-93a1-2ed402bce14f","keyName":"e2e-sub-iso-7431e0","subscription":"e2e-shared-sub-a5e541","tenant":"e2e-shared-a-2b5160","userId":"8396166d-1b54-4bec-93a1-2ed402bce14f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T18:33:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"350f68c3-08f7-46b8-8302-6e58811cecc9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:33:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"350f68c3-08f7-46b8-8302-6e58811cecc9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:33:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"350f68c3-08f7-46b8-8302-6e58811cecc9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:33:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"350f68c3-08f7-46b8-8302-6e58811cecc9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2b5160/sub-test-model-2b5160\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:33:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"350f68c3-08f7-46b8-8302-6e58811cecc9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T18:33:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"350f68c3-08f7-46b8-8302-6e58811cecc9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-a5e541"}
{"level":"debug","ts":"2026-07-07T18:33:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"350f68c3-08f7-46b8-8302-6e58811cecc9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T18:33:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"350f68c3-08f7-46b8-8302-6e58811cecc9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-07T18:33:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"350f68c3-08f7-46b8-8302-6e58811cecc9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:33:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"350f68c3-08f7-46b8-8302-6e58811cecc9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:33:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"33abb234-4dd1-44dc-9e12-34eaeb5ea852","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:43494","PortSpecifier":{"PortValue":43494}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"33abb234-4dd1-44dc-9e12-34eaeb5ea852","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-200b05.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:33:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"33abb234-4dd1-44dc-9e12-34eaeb5ea852","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:43494","PortSpecifier":{"PortValue":43494}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783449237,"nanos":483674769},"http":{"id":"33abb234-4dd1-44dc-9e12-34eaeb5ea852","method":"POST","headers":{":authority":"e2e-shared-b-200b05.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:33:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"33abb234-4dd1-44dc-9e12-34eaeb5ea852","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-XqHtQcAhMLhPTGM7_obTFCKphNAgGXB23e5eaZJLYfI7igGdn5vXfsiFDb4B"}
{"level":"debug","ts":"2026-07-07T18:33:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"33abb234-4dd1-44dc-9e12-34eaeb5ea852","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-200b05.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-XqHtQcAhMLhPTGM7_obTFCKphNAgGXB23e5eaZJLYfI7igGdn5vXfsiFDb4B\"}"}
{"level":"debug","ts":"2026-07-07T18:33:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"33abb234-4dd1-44dc-9e12-34eaeb5ea852","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-200b05.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4cee44f5-99ce-451a-bca2-4f437b6bd01b","keyName":"e2e-sub-iso-5911ad","subscription":"e2e-shared-sub-a5e541","tenant":"e2e-shared-b-200b05","userId":"4cee44f5-99ce-451a-bca2-4f437b6bd01b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T18:33:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"33abb234-4dd1-44dc-9e12-34eaeb5ea852","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:33:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33abb234-4dd1-44dc-9e12-34eaeb5ea852","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:33:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33abb234-4dd1-44dc-9e12-34eaeb5ea852","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:33:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33abb234-4dd1-44dc-9e12-34eaeb5ea852","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-200b05/sub-test-model-200b05\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:33:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"33abb234-4dd1-44dc-9e12-34eaeb5ea852","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T18:33:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33abb234-4dd1-44dc-9e12-34eaeb5ea852","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-a5e541"}
{"level":"debug","ts":"2026-07-07T18:33:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33abb234-4dd1-44dc-9e12-34eaeb5ea852","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T18:33:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33abb234-4dd1-44dc-9e12-34eaeb5ea852","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T18:33:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"33abb234-4dd1-44dc-9e12-34eaeb5ea852","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:33:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"33abb234-4dd1-44dc-9e12-34eaeb5ea852","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/05c62f7eaecbfa14939993ec52ec782713fc0574ab7923705baf47a3a3cf7506"}
{"level":"info","ts":"2026-07-07T18:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6840e777cd24484d78eb8d81cd39abcdbd015c509208ddc473c2a97c9554d6e8"}
{"level":"info","ts":"2026-07-07T18:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/29a9b58b7849198fd5932f09e9ef117905a5508ec069aeda28d6e3ddc2ed2541"}
{"level":"info","ts":"2026-07-07T18:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/55706dadc1e5ef6f3713a7b7acbe3604b80c1683d4341c65e7359ee9042cfe21"}
{"level":"info","ts":"2026-07-07T18:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eb56ebc3dc1bef3acf1b5f212a4fd527114fe3f0d9d7d13a1b0b27f0b3a34c57"}
{"level":"info","ts":"2026-07-07T18:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/928628794017ceb2d915d407b1c5088cbd972ace6ceba1f911e25327bc4ec534"}
{"level":"info","ts":"2026-07-07T18:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d2a5e11ae39603c2d0253569e6ab0ddad2345e9a7b984892bbda9c575b104859"}
{"level":"info","ts":"2026-07-07T18:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7a2f760ed2758480c11db8f5d6d7a944d406f6b03b8e5b9eb08ce0ef1081ad37"}
{"level":"info","ts":"2026-07-07T18:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d0e77e1b242a2e8ce653204f048f95c96ab030427cf3d2b4d72a311dfbfb3ee1"}
{"level":"info","ts":"2026-07-07T18:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/12df09ec89ff6371979d04bad5927e2d885a26207605cd9449ba110f5c45eed6"}
{"level":"info","ts":"2026-07-07T18:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2f56139354cf88bd8b2e3e465bf1a36981ee1f6c0917ed423327d33af88a76cb"}
{"level":"info","ts":"2026-07-07T18:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/21d69a1ed10fce789060b0a83bf961b131d35ed51cc186d8936ff98191b132b3"}
{"level":"info","ts":"2026-07-07T18:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cd8aae53cd7ff08f3e985856d506fb9f0f73bb2f963ab19f0c7dabe52b198bd8"}
{"level":"info","ts":"2026-07-07T18:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/adfa68f097b8d415455e34f3cf2dcca0f591d0505da060f4ceb32a35dd1dc2c3"}
{"level":"info","ts":"2026-07-07T18:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ecf638aa1fb036db0c8cc5428ab76a7c307add3186de8d07da708a96273870d"}
{"level":"info","ts":"2026-07-07T18:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/165a7b07a2ca8fabd3fe37506f7c1ed964f402ba526d0d91cd29be9d78527e04"}
{"level":"debug","ts":"2026-07-07T18:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1dee7f72bb8a71da5bd0897d824170e366f7f30ea843a61eb626d76e83f9d164","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:34:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:34:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1dee7f72bb8a71da5bd0897d824170e366f7f30ea843a61eb626d76e83f9d164","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1dee7f72bb8a71da5bd0897d824170e366f7f30ea843a61eb626d76e83f9d164","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1dee7f72bb8a71da5bd0897d824170e366f7f30ea843a61eb626d76e83f9d164"}
{"level":"debug","ts":"2026-07-07T18:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1dee7f72bb8a71da5bd0897d824170e366f7f30ea843a61eb626d76e83f9d164","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1dee7f72bb8a71da5bd0897d824170e366f7f30ea843a61eb626d76e83f9d164","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1dee7f72bb8a71da5bd0897d824170e366f7f30ea843a61eb626d76e83f9d164"}
{"level":"debug","ts":"2026-07-07T18:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1dee7f72bb8a71da5bd0897d824170e366f7f30ea843a61eb626d76e83f9d164","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:34:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:34:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1dee7f72bb8a71da5bd0897d824170e366f7f30ea843a61eb626d76e83f9d164"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1dee7f72bb8a71da5bd0897d824170e366f7f30ea843a61eb626d76e83f9d164","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1dee7f72bb8a71da5bd0897d824170e366f7f30ea843a61eb626d76e83f9d164","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:34:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:34:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1dee7f72bb8a71da5bd0897d824170e366f7f30ea843a61eb626d76e83f9d164","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1dee7f72bb8a71da5bd0897d824170e366f7f30ea843a61eb626d76e83f9d164","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1dee7f72bb8a71da5bd0897d824170e366f7f30ea843a61eb626d76e83f9d164","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1dee7f72bb8a71da5bd0897d824170e366f7f30ea843a61eb626d76e83f9d164"}
{"level":"debug","ts":"2026-07-07T18:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1dee7f72bb8a71da5bd0897d824170e366f7f30ea843a61eb626d76e83f9d164","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1dee7f72bb8a71da5bd0897d824170e366f7f30ea843a61eb626d76e83f9d164"}
{"level":"debug","ts":"2026-07-07T18:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1dee7f72bb8a71da5bd0897d824170e366f7f30ea843a61eb626d76e83f9d164","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:34:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:34:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1dee7f72bb8a71da5bd0897d824170e366f7f30ea843a61eb626d76e83f9d164"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1dee7f72bb8a71da5bd0897d824170e366f7f30ea843a61eb626d76e83f9d164","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1dee7f72bb8a71da5bd0897d824170e366f7f30ea843a61eb626d76e83f9d164","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:34:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:34:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1dee7f72bb8a71da5bd0897d824170e366f7f30ea843a61eb626d76e83f9d164","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1dee7f72bb8a71da5bd0897d824170e366f7f30ea843a61eb626d76e83f9d164","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1dee7f72bb8a71da5bd0897d824170e366f7f30ea843a61eb626d76e83f9d164","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1dee7f72bb8a71da5bd0897d824170e366f7f30ea843a61eb626d76e83f9d164"}
{"level":"debug","ts":"2026-07-07T18:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1dee7f72bb8a71da5bd0897d824170e366f7f30ea843a61eb626d76e83f9d164","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1dee7f72bb8a71da5bd0897d824170e366f7f30ea843a61eb626d76e83f9d164"}
{"level":"debug","ts":"2026-07-07T18:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1dee7f72bb8a71da5bd0897d824170e366f7f30ea843a61eb626d76e83f9d164","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:34:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:34:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1dee7f72bb8a71da5bd0897d824170e366f7f30ea843a61eb626d76e83f9d164"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1dee7f72bb8a71da5bd0897d824170e366f7f30ea843a61eb626d76e83f9d164","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1dee7f72bb8a71da5bd0897d824170e366f7f30ea843a61eb626d76e83f9d164","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:34:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:34:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1dee7f72bb8a71da5bd0897d824170e366f7f30ea843a61eb626d76e83f9d164","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c38fd928142146dd0c2d7e0e81cbf54ac357f687349eebeac79c86d79255d123","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:34:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:34:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1dee7f72bb8a71da5bd0897d824170e366f7f30ea843a61eb626d76e83f9d164"}
{"level":"info","ts":"2026-07-07T18:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c38fd928142146dd0c2d7e0e81cbf54ac357f687349eebeac79c86d79255d123","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1dee7f72bb8a71da5bd0897d824170e366f7f30ea843a61eb626d76e83f9d164","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:34:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:34:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1dee7f72bb8a71da5bd0897d824170e366f7f30ea843a61eb626d76e83f9d164"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1dee7f72bb8a71da5bd0897d824170e366f7f30ea843a61eb626d76e83f9d164","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c38fd928142146dd0c2d7e0e81cbf54ac357f687349eebeac79c86d79255d123","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:34:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:34:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c38fd928142146dd0c2d7e0e81cbf54ac357f687349eebeac79c86d79255d123"}
{"level":"info","ts":"2026-07-07T18:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c38fd928142146dd0c2d7e0e81cbf54ac357f687349eebeac79c86d79255d123","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1dee7f72bb8a71da5bd0897d824170e366f7f30ea843a61eb626d76e83f9d164","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:34:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:34:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1dee7f72bb8a71da5bd0897d824170e366f7f30ea843a61eb626d76e83f9d164"}
{"level":"info","ts":"2026-07-07T18:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1dee7f72bb8a71da5bd0897d824170e366f7f30ea843a61eb626d76e83f9d164","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c38fd928142146dd0c2d7e0e81cbf54ac357f687349eebeac79c86d79255d123","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1dee7f72bb8a71da5bd0897d824170e366f7f30ea843a61eb626d76e83f9d164","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:34:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:34:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1dee7f72bb8a71da5bd0897d824170e366f7f30ea843a61eb626d76e83f9d164"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1dee7f72bb8a71da5bd0897d824170e366f7f30ea843a61eb626d76e83f9d164","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1dee7f72bb8a71da5bd0897d824170e366f7f30ea843a61eb626d76e83f9d164","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:34:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:34:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1dee7f72bb8a71da5bd0897d824170e366f7f30ea843a61eb626d76e83f9d164"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c38fd928142146dd0c2d7e0e81cbf54ac357f687349eebeac79c86d79255d123"}
{"level":"error","ts":"2026-07-07T18:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1dee7f72bb8a71da5bd0897d824170e366f7f30ea843a61eb626d76e83f9d164","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1dee7f72bb8a71da5bd0897d824170e366f7f30ea843a61eb626d76e83f9d164\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T18:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c38fd928142146dd0c2d7e0e81cbf54ac357f687349eebeac79c86d79255d123","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:34:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:34:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c38fd928142146dd0c2d7e0e81cbf54ac357f687349eebeac79c86d79255d123"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c38fd928142146dd0c2d7e0e81cbf54ac357f687349eebeac79c86d79255d123","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1dee7f72bb8a71da5bd0897d824170e366f7f30ea843a61eb626d76e83f9d164","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:34:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:34:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1dee7f72bb8a71da5bd0897d824170e366f7f30ea843a61eb626d76e83f9d164"}
{"level":"info","ts":"2026-07-07T18:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1dee7f72bb8a71da5bd0897d824170e366f7f30ea843a61eb626d76e83f9d164","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c38fd928142146dd0c2d7e0e81cbf54ac357f687349eebeac79c86d79255d123","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:34:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:34:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c38fd928142146dd0c2d7e0e81cbf54ac357f687349eebeac79c86d79255d123"}
{"level":"info","ts":"2026-07-07T18:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c38fd928142146dd0c2d7e0e81cbf54ac357f687349eebeac79c86d79255d123","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1dee7f72bb8a71da5bd0897d824170e366f7f30ea843a61eb626d76e83f9d164","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c38fd928142146dd0c2d7e0e81cbf54ac357f687349eebeac79c86d79255d123","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:34:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:34:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c38fd928142146dd0c2d7e0e81cbf54ac357f687349eebeac79c86d79255d123"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1dee7f72bb8a71da5bd0897d824170e366f7f30ea843a61eb626d76e83f9d164"}
{"level":"info","ts":"2026-07-07T18:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c38fd928142146dd0c2d7e0e81cbf54ac357f687349eebeac79c86d79255d123","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c38fd928142146dd0c2d7e0e81cbf54ac357f687349eebeac79c86d79255d123","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c38fd928142146dd0c2d7e0e81cbf54ac357f687349eebeac79c86d79255d123","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:34:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:34:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c38fd928142146dd0c2d7e0e81cbf54ac357f687349eebeac79c86d79255d123","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1dee7f72bb8a71da5bd0897d824170e366f7f30ea843a61eb626d76e83f9d164","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:34:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:34:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1dee7f72bb8a71da5bd0897d824170e366f7f30ea843a61eb626d76e83f9d164"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c38fd928142146dd0c2d7e0e81cbf54ac357f687349eebeac79c86d79255d123"}
{"level":"info","ts":"2026-07-07T18:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1dee7f72bb8a71da5bd0897d824170e366f7f30ea843a61eb626d76e83f9d164","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c38fd928142146dd0c2d7e0e81cbf54ac357f687349eebeac79c86d79255d123","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1dee7f72bb8a71da5bd0897d824170e366f7f30ea843a61eb626d76e83f9d164","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c2c24d1c96c830b77dc06f6523b0105969913c58cc2d046895e43470ccd8472","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:34:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:34:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c38fd928142146dd0c2d7e0e81cbf54ac357f687349eebeac79c86d79255d123"}
{"level":"info","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c2c24d1c96c830b77dc06f6523b0105969913c58cc2d046895e43470ccd8472","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c38fd928142146dd0c2d7e0e81cbf54ac357f687349eebeac79c86d79255d123","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:34:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:34:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c38fd928142146dd0c2d7e0e81cbf54ac357f687349eebeac79c86d79255d123"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1dee7f72bb8a71da5bd0897d824170e366f7f30ea843a61eb626d76e83f9d164"}
{"level":"info","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c38fd928142146dd0c2d7e0e81cbf54ac357f687349eebeac79c86d79255d123","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c2c24d1c96c830b77dc06f6523b0105969913c58cc2d046895e43470ccd8472","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:34:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:34:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c2c24d1c96c830b77dc06f6523b0105969913c58cc2d046895e43470ccd8472"}
{"level":"info","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c2c24d1c96c830b77dc06f6523b0105969913c58cc2d046895e43470ccd8472","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c38fd928142146dd0c2d7e0e81cbf54ac357f687349eebeac79c86d79255d123","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:34:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:34:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c38fd928142146dd0c2d7e0e81cbf54ac357f687349eebeac79c86d79255d123","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c2c24d1c96c830b77dc06f6523b0105969913c58cc2d046895e43470ccd8472","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:34:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:34:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c2c24d1c96c830b77dc06f6523b0105969913c58cc2d046895e43470ccd8472"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c38fd928142146dd0c2d7e0e81cbf54ac357f687349eebeac79c86d79255d123"}
{"level":"info","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c2c24d1c96c830b77dc06f6523b0105969913c58cc2d046895e43470ccd8472","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c38fd928142146dd0c2d7e0e81cbf54ac357f687349eebeac79c86d79255d123","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:34:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:34:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c38fd928142146dd0c2d7e0e81cbf54ac357f687349eebeac79c86d79255d123"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c38fd928142146dd0c2d7e0e81cbf54ac357f687349eebeac79c86d79255d123","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c2c24d1c96c830b77dc06f6523b0105969913c58cc2d046895e43470ccd8472","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:34:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:34:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c2c24d1c96c830b77dc06f6523b0105969913c58cc2d046895e43470ccd8472"}
{"level":"info","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c2c24d1c96c830b77dc06f6523b0105969913c58cc2d046895e43470ccd8472","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c38fd928142146dd0c2d7e0e81cbf54ac357f687349eebeac79c86d79255d123","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:34:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:34:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c38fd928142146dd0c2d7e0e81cbf54ac357f687349eebeac79c86d79255d123"}
{"level":"info","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c38fd928142146dd0c2d7e0e81cbf54ac357f687349eebeac79c86d79255d123","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c2c24d1c96c830b77dc06f6523b0105969913c58cc2d046895e43470ccd8472","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a638544a7b4453c24e7e35deee0f8c4e811435fe0a55fcf19a4fdbc6e82e4db4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:34:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:34:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a638544a7b4453c24e7e35deee0f8c4e811435fe0a55fcf19a4fdbc6e82e4db4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c38fd928142146dd0c2d7e0e81cbf54ac357f687349eebeac79c86d79255d123","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:34:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:34:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c38fd928142146dd0c2d7e0e81cbf54ac357f687349eebeac79c86d79255d123"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c2c24d1c96c830b77dc06f6523b0105969913c58cc2d046895e43470ccd8472"}
{"level":"info","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c38fd928142146dd0c2d7e0e81cbf54ac357f687349eebeac79c86d79255d123","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c2c24d1c96c830b77dc06f6523b0105969913c58cc2d046895e43470ccd8472","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:34:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:34:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c2c24d1c96c830b77dc06f6523b0105969913c58cc2d046895e43470ccd8472"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a638544a7b4453c24e7e35deee0f8c4e811435fe0a55fcf19a4fdbc6e82e4db4"}
{"level":"info","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c2c24d1c96c830b77dc06f6523b0105969913c58cc2d046895e43470ccd8472","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a638544a7b4453c24e7e35deee0f8c4e811435fe0a55fcf19a4fdbc6e82e4db4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:34:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:34:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a638544a7b4453c24e7e35deee0f8c4e811435fe0a55fcf19a4fdbc6e82e4db4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c38fd928142146dd0c2d7e0e81cbf54ac357f687349eebeac79c86d79255d123"}
{"level":"info","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a638544a7b4453c24e7e35deee0f8c4e811435fe0a55fcf19a4fdbc6e82e4db4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c38fd928142146dd0c2d7e0e81cbf54ac357f687349eebeac79c86d79255d123","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c2c24d1c96c830b77dc06f6523b0105969913c58cc2d046895e43470ccd8472","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:34:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:34:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c2c24d1c96c830b77dc06f6523b0105969913c58cc2d046895e43470ccd8472","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a638544a7b4453c24e7e35deee0f8c4e811435fe0a55fcf19a4fdbc6e82e4db4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c2c24d1c96c830b77dc06f6523b0105969913c58cc2d046895e43470ccd8472","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c2c24d1c96c830b77dc06f6523b0105969913c58cc2d046895e43470ccd8472"}
{"level":"debug","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c2c24d1c96c830b77dc06f6523b0105969913c58cc2d046895e43470ccd8472","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:34:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:34:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c2c24d1c96c830b77dc06f6523b0105969913c58cc2d046895e43470ccd8472"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c2c24d1c96c830b77dc06f6523b0105969913c58cc2d046895e43470ccd8472","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c2c24d1c96c830b77dc06f6523b0105969913c58cc2d046895e43470ccd8472","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a638544a7b4453c24e7e35deee0f8c4e811435fe0a55fcf19a4fdbc6e82e4db4"}
{"level":"info","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c2c24d1c96c830b77dc06f6523b0105969913c58cc2d046895e43470ccd8472"}
{"level":"debug","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24d20cdc69688a666575d3ba2b477953d27cb35e84fd59ff807bb9750f61560d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:34:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:34:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24d20cdc69688a666575d3ba2b477953d27cb35e84fd59ff807bb9750f61560d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"858427b36ee01a2e80759bdcb9b4d6a8b3ad0b1fda11601c2572b61c61897f21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:34:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:34:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24d20cdc69688a666575d3ba2b477953d27cb35e84fd59ff807bb9750f61560d"}
{"level":"info","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"858427b36ee01a2e80759bdcb9b4d6a8b3ad0b1fda11601c2572b61c61897f21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24d20cdc69688a666575d3ba2b477953d27cb35e84fd59ff807bb9750f61560d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:34:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:34:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24d20cdc69688a666575d3ba2b477953d27cb35e84fd59ff807bb9750f61560d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/858427b36ee01a2e80759bdcb9b4d6a8b3ad0b1fda11601c2572b61c61897f21"}
{"level":"info","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24d20cdc69688a666575d3ba2b477953d27cb35e84fd59ff807bb9750f61560d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"673cdbad5df7b3cfa8aac6c2225841151a3f7946d95516619c62957be3589586","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:34:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:34:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"673cdbad5df7b3cfa8aac6c2225841151a3f7946d95516619c62957be3589586","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"858427b36ee01a2e80759bdcb9b4d6a8b3ad0b1fda11601c2572b61c61897f21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:34:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:34:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["858427b36ee01a2e80759bdcb9b4d6a8b3ad0b1fda11601c2572b61c61897f21"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24d20cdc69688a666575d3ba2b477953d27cb35e84fd59ff807bb9750f61560d"}
{"level":"info","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"858427b36ee01a2e80759bdcb9b4d6a8b3ad0b1fda11601c2572b61c61897f21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24d20cdc69688a666575d3ba2b477953d27cb35e84fd59ff807bb9750f61560d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"673cdbad5df7b3cfa8aac6c2225841151a3f7946d95516619c62957be3589586","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:34:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:34:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/673cdbad5df7b3cfa8aac6c2225841151a3f7946d95516619c62957be3589586"}
{"level":"info","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"673cdbad5df7b3cfa8aac6c2225841151a3f7946d95516619c62957be3589586","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"858427b36ee01a2e80759bdcb9b4d6a8b3ad0b1fda11601c2572b61c61897f21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:34:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:34:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"858427b36ee01a2e80759bdcb9b4d6a8b3ad0b1fda11601c2572b61c61897f21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"673cdbad5df7b3cfa8aac6c2225841151a3f7946d95516619c62957be3589586","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:34:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:34:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["673cdbad5df7b3cfa8aac6c2225841151a3f7946d95516619c62957be3589586"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/858427b36ee01a2e80759bdcb9b4d6a8b3ad0b1fda11601c2572b61c61897f21"}
{"level":"info","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"673cdbad5df7b3cfa8aac6c2225841151a3f7946d95516619c62957be3589586","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"931ee8764973c652d4368fc774a1070cc059f325e76f2cab53b27a957c89066b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:34:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:34:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24d20cdc69688a666575d3ba2b477953d27cb35e84fd59ff807bb9750f61560d"}
{"level":"info","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"931ee8764973c652d4368fc774a1070cc059f325e76f2cab53b27a957c89066b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"858427b36ee01a2e80759bdcb9b4d6a8b3ad0b1fda11601c2572b61c61897f21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:34:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:34:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["858427b36ee01a2e80759bdcb9b4d6a8b3ad0b1fda11601c2572b61c61897f21"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"858427b36ee01a2e80759bdcb9b4d6a8b3ad0b1fda11601c2572b61c61897f21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"673cdbad5df7b3cfa8aac6c2225841151a3f7946d95516619c62957be3589586","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:34:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:34:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/673cdbad5df7b3cfa8aac6c2225841151a3f7946d95516619c62957be3589586"}
{"level":"info","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"673cdbad5df7b3cfa8aac6c2225841151a3f7946d95516619c62957be3589586","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"931ee8764973c652d4368fc774a1070cc059f325e76f2cab53b27a957c89066b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:34:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:34:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/931ee8764973c652d4368fc774a1070cc059f325e76f2cab53b27a957c89066b"}
{"level":"info","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"931ee8764973c652d4368fc774a1070cc059f325e76f2cab53b27a957c89066b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"858427b36ee01a2e80759bdcb9b4d6a8b3ad0b1fda11601c2572b61c61897f21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:34:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:34:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"858427b36ee01a2e80759bdcb9b4d6a8b3ad0b1fda11601c2572b61c61897f21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"673cdbad5df7b3cfa8aac6c2225841151a3f7946d95516619c62957be3589586","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:34:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:34:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["673cdbad5df7b3cfa8aac6c2225841151a3f7946d95516619c62957be3589586"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/858427b36ee01a2e80759bdcb9b4d6a8b3ad0b1fda11601c2572b61c61897f21"}
{"level":"info","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"673cdbad5df7b3cfa8aac6c2225841151a3f7946d95516619c62957be3589586","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"931ee8764973c652d4368fc774a1070cc059f325e76f2cab53b27a957c89066b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:34:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:34:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["931ee8764973c652d4368fc774a1070cc059f325e76f2cab53b27a957c89066b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/673cdbad5df7b3cfa8aac6c2225841151a3f7946d95516619c62957be3589586"}
{"level":"info","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"931ee8764973c652d4368fc774a1070cc059f325e76f2cab53b27a957c89066b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"858427b36ee01a2e80759bdcb9b4d6a8b3ad0b1fda11601c2572b61c61897f21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:34:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:34:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["858427b36ee01a2e80759bdcb9b4d6a8b3ad0b1fda11601c2572b61c61897f21"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/931ee8764973c652d4368fc774a1070cc059f325e76f2cab53b27a957c89066b"}
{"level":"info","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"858427b36ee01a2e80759bdcb9b4d6a8b3ad0b1fda11601c2572b61c61897f21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"673cdbad5df7b3cfa8aac6c2225841151a3f7946d95516619c62957be3589586","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"931ee8764973c652d4368fc774a1070cc059f325e76f2cab53b27a957c89066b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"858427b36ee01a2e80759bdcb9b4d6a8b3ad0b1fda11601c2572b61c61897f21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:34:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:34:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"858427b36ee01a2e80759bdcb9b4d6a8b3ad0b1fda11601c2572b61c61897f21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"858427b36ee01a2e80759bdcb9b4d6a8b3ad0b1fda11601c2572b61c61897f21","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/858427b36ee01a2e80759bdcb9b4d6a8b3ad0b1fda11601c2572b61c61897f21"}
{"level":"debug","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"858427b36ee01a2e80759bdcb9b4d6a8b3ad0b1fda11601c2572b61c61897f21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:34:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:34:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["858427b36ee01a2e80759bdcb9b4d6a8b3ad0b1fda11601c2572b61c61897f21"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"858427b36ee01a2e80759bdcb9b4d6a8b3ad0b1fda11601c2572b61c61897f21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"858427b36ee01a2e80759bdcb9b4d6a8b3ad0b1fda11601c2572b61c61897f21","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/673cdbad5df7b3cfa8aac6c2225841151a3f7946d95516619c62957be3589586"}
{"level":"info","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/931ee8764973c652d4368fc774a1070cc059f325e76f2cab53b27a957c89066b"}
{"level":"info","ts":"2026-07-07T18:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/858427b36ee01a2e80759bdcb9b4d6a8b3ad0b1fda11601c2572b61c61897f21"}
{"level":"debug","ts":"2026-07-07T18:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56ff444858977ec1fd96755721d2204ee169d7c45e06cd5e36a207565f978e9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:34:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:34:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56ff444858977ec1fd96755721d2204ee169d7c45e06cd5e36a207565f978e9b"}
{"level":"info","ts":"2026-07-07T18:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56ff444858977ec1fd96755721d2204ee169d7c45e06cd5e36a207565f978e9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56ff444858977ec1fd96755721d2204ee169d7c45e06cd5e36a207565f978e9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56ff444858977ec1fd96755721d2204ee169d7c45e06cd5e36a207565f978e9b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56ff444858977ec1fd96755721d2204ee169d7c45e06cd5e36a207565f978e9b"}
{"level":"debug","ts":"2026-07-07T18:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56ff444858977ec1fd96755721d2204ee169d7c45e06cd5e36a207565f978e9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:34:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:34:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56ff444858977ec1fd96755721d2204ee169d7c45e06cd5e36a207565f978e9b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56ff444858977ec1fd96755721d2204ee169d7c45e06cd5e36a207565f978e9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56ff444858977ec1fd96755721d2204ee169d7c45e06cd5e36a207565f978e9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:34:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:34:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56ff444858977ec1fd96755721d2204ee169d7c45e06cd5e36a207565f978e9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56ff444858977ec1fd96755721d2204ee169d7c45e06cd5e36a207565f978e9b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56ff444858977ec1fd96755721d2204ee169d7c45e06cd5e36a207565f978e9b"}
{"level":"debug","ts":"2026-07-07T18:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56ff444858977ec1fd96755721d2204ee169d7c45e06cd5e36a207565f978e9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56ff444858977ec1fd96755721d2204ee169d7c45e06cd5e36a207565f978e9b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56ff444858977ec1fd96755721d2204ee169d7c45e06cd5e36a207565f978e9b"}
{"level":"debug","ts":"2026-07-07T18:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56ff444858977ec1fd96755721d2204ee169d7c45e06cd5e36a207565f978e9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:34:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:34:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56ff444858977ec1fd96755721d2204ee169d7c45e06cd5e36a207565f978e9b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56ff444858977ec1fd96755721d2204ee169d7c45e06cd5e36a207565f978e9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56ff444858977ec1fd96755721d2204ee169d7c45e06cd5e36a207565f978e9b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56ff444858977ec1fd96755721d2204ee169d7c45e06cd5e36a207565f978e9b"}
{"level":"debug","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5433941fb23921b4779870e22474bd0483f3b87320f5ba029a131fe8e34f63e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:34:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:34:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5433941fb23921b4779870e22474bd0483f3b87320f5ba029a131fe8e34f63e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5433941fb23921b4779870e22474bd0483f3b87320f5ba029a131fe8e34f63e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5433941fb23921b4779870e22474bd0483f3b87320f5ba029a131fe8e34f63e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5433941fb23921b4779870e22474bd0483f3b87320f5ba029a131fe8e34f63e"}
{"level":"debug","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5433941fb23921b4779870e22474bd0483f3b87320f5ba029a131fe8e34f63e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5433941fb23921b4779870e22474bd0483f3b87320f5ba029a131fe8e34f63e"}
{"level":"debug","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5433941fb23921b4779870e22474bd0483f3b87320f5ba029a131fe8e34f63e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:34:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:34:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5433941fb23921b4779870e22474bd0483f3b87320f5ba029a131fe8e34f63e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5433941fb23921b4779870e22474bd0483f3b87320f5ba029a131fe8e34f63e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5433941fb23921b4779870e22474bd0483f3b87320f5ba029a131fe8e34f63e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:34:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:34:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5433941fb23921b4779870e22474bd0483f3b87320f5ba029a131fe8e34f63e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5433941fb23921b4779870e22474bd0483f3b87320f5ba029a131fe8e34f63e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5433941fb23921b4779870e22474bd0483f3b87320f5ba029a131fe8e34f63e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5433941fb23921b4779870e22474bd0483f3b87320f5ba029a131fe8e34f63e"}
{"level":"debug","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5433941fb23921b4779870e22474bd0483f3b87320f5ba029a131fe8e34f63e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5433941fb23921b4779870e22474bd0483f3b87320f5ba029a131fe8e34f63e"}
{"level":"debug","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5433941fb23921b4779870e22474bd0483f3b87320f5ba029a131fe8e34f63e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:34:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:34:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5433941fb23921b4779870e22474bd0483f3b87320f5ba029a131fe8e34f63e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5433941fb23921b4779870e22474bd0483f3b87320f5ba029a131fe8e34f63e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5433941fb23921b4779870e22474bd0483f3b87320f5ba029a131fe8e34f63e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:34:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:34:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5433941fb23921b4779870e22474bd0483f3b87320f5ba029a131fe8e34f63e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5433941fb23921b4779870e22474bd0483f3b87320f5ba029a131fe8e34f63e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5433941fb23921b4779870e22474bd0483f3b87320f5ba029a131fe8e34f63e"}
{"level":"debug","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5433941fb23921b4779870e22474bd0483f3b87320f5ba029a131fe8e34f63e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5433941fb23921b4779870e22474bd0483f3b87320f5ba029a131fe8e34f63e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5433941fb23921b4779870e22474bd0483f3b87320f5ba029a131fe8e34f63e"}
{"level":"debug","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5433941fb23921b4779870e22474bd0483f3b87320f5ba029a131fe8e34f63e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:34:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:34:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5433941fb23921b4779870e22474bd0483f3b87320f5ba029a131fe8e34f63e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5433941fb23921b4779870e22474bd0483f3b87320f5ba029a131fe8e34f63e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5433941fb23921b4779870e22474bd0483f3b87320f5ba029a131fe8e34f63e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5433941fb23921b4779870e22474bd0483f3b87320f5ba029a131fe8e34f63e"}
{"level":"debug","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a166df2b33d22fd52a663fb21df71779fa3428e6bd942ef0368ed9c6eaac187","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:34:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:34:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a166df2b33d22fd52a663fb21df71779fa3428e6bd942ef0368ed9c6eaac187","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a166df2b33d22fd52a663fb21df71779fa3428e6bd942ef0368ed9c6eaac187","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a166df2b33d22fd52a663fb21df71779fa3428e6bd942ef0368ed9c6eaac187"}
{"level":"debug","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a166df2b33d22fd52a663fb21df71779fa3428e6bd942ef0368ed9c6eaac187","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a166df2b33d22fd52a663fb21df71779fa3428e6bd942ef0368ed9c6eaac187"}
{"level":"debug","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a166df2b33d22fd52a663fb21df71779fa3428e6bd942ef0368ed9c6eaac187","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:34:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:34:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a166df2b33d22fd52a663fb21df71779fa3428e6bd942ef0368ed9c6eaac187"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a166df2b33d22fd52a663fb21df71779fa3428e6bd942ef0368ed9c6eaac187","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a166df2b33d22fd52a663fb21df71779fa3428e6bd942ef0368ed9c6eaac187","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:34:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:34:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a166df2b33d22fd52a663fb21df71779fa3428e6bd942ef0368ed9c6eaac187"}
{"level":"info","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a166df2b33d22fd52a663fb21df71779fa3428e6bd942ef0368ed9c6eaac187","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a166df2b33d22fd52a663fb21df71779fa3428e6bd942ef0368ed9c6eaac187","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:34:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:34:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a166df2b33d22fd52a663fb21df71779fa3428e6bd942ef0368ed9c6eaac187"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a166df2b33d22fd52a663fb21df71779fa3428e6bd942ef0368ed9c6eaac187","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c07c060b8ca340eab7d5648f64ca1514e12cb2a9378864fa15656f25abf9e9e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:34:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:34:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a166df2b33d22fd52a663fb21df71779fa3428e6bd942ef0368ed9c6eaac187"}
{"level":"info","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c07c060b8ca340eab7d5648f64ca1514e12cb2a9378864fa15656f25abf9e9e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a166df2b33d22fd52a663fb21df71779fa3428e6bd942ef0368ed9c6eaac187","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c07c060b8ca340eab7d5648f64ca1514e12cb2a9378864fa15656f25abf9e9e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:34:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:34:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c07c060b8ca340eab7d5648f64ca1514e12cb2a9378864fa15656f25abf9e9e9"}
{"level":"info","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c07c060b8ca340eab7d5648f64ca1514e12cb2a9378864fa15656f25abf9e9e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c07c060b8ca340eab7d5648f64ca1514e12cb2a9378864fa15656f25abf9e9e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:34:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:34:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c07c060b8ca340eab7d5648f64ca1514e12cb2a9378864fa15656f25abf9e9e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c07c060b8ca340eab7d5648f64ca1514e12cb2a9378864fa15656f25abf9e9e9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c07c060b8ca340eab7d5648f64ca1514e12cb2a9378864fa15656f25abf9e9e9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c07c060b8ca340eab7d5648f64ca1514e12cb2a9378864fa15656f25abf9e9e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:34:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:34:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c07c060b8ca340eab7d5648f64ca1514e12cb2a9378864fa15656f25abf9e9e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a166df2b33d22fd52a663fb21df71779fa3428e6bd942ef0368ed9c6eaac187"}
{"level":"info","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c07c060b8ca340eab7d5648f64ca1514e12cb2a9378864fa15656f25abf9e9e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c07c060b8ca340eab7d5648f64ca1514e12cb2a9378864fa15656f25abf9e9e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:34:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:34:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c07c060b8ca340eab7d5648f64ca1514e12cb2a9378864fa15656f25abf9e9e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f906acf030863e5d0ad4fbade71834e9cb7b0fb6a0872698781b3578e11230e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:34:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:34:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c07c060b8ca340eab7d5648f64ca1514e12cb2a9378864fa15656f25abf9e9e9"}
{"level":"info","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f906acf030863e5d0ad4fbade71834e9cb7b0fb6a0872698781b3578e11230e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c07c060b8ca340eab7d5648f64ca1514e12cb2a9378864fa15656f25abf9e9e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:34:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:34:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c07c060b8ca340eab7d5648f64ca1514e12cb2a9378864fa15656f25abf9e9e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c07c060b8ca340eab7d5648f64ca1514e12cb2a9378864fa15656f25abf9e9e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f906acf030863e5d0ad4fbade71834e9cb7b0fb6a0872698781b3578e11230e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:34:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:34:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f906acf030863e5d0ad4fbade71834e9cb7b0fb6a0872698781b3578e11230e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c07c060b8ca340eab7d5648f64ca1514e12cb2a9378864fa15656f25abf9e9e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f906acf030863e5d0ad4fbade71834e9cb7b0fb6a0872698781b3578e11230e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f906acf030863e5d0ad4fbade71834e9cb7b0fb6a0872698781b3578e11230e"}
{"level":"debug","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f906acf030863e5d0ad4fbade71834e9cb7b0fb6a0872698781b3578e11230e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:34:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:34:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f906acf030863e5d0ad4fbade71834e9cb7b0fb6a0872698781b3578e11230e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c07c060b8ca340eab7d5648f64ca1514e12cb2a9378864fa15656f25abf9e9e9"}
{"level":"info","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f906acf030863e5d0ad4fbade71834e9cb7b0fb6a0872698781b3578e11230e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f906acf030863e5d0ad4fbade71834e9cb7b0fb6a0872698781b3578e11230e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:34:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:34:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f906acf030863e5d0ad4fbade71834e9cb7b0fb6a0872698781b3578e11230e"}
{"level":"info","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f906acf030863e5d0ad4fbade71834e9cb7b0fb6a0872698781b3578e11230e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01d329525cf838f47dcdd3a03baf5c837ea2e54dcddb579896e08ae6e7c4caf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:34:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:34:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f906acf030863e5d0ad4fbade71834e9cb7b0fb6a0872698781b3578e11230e"}
{"level":"info","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01d329525cf838f47dcdd3a03baf5c837ea2e54dcddb579896e08ae6e7c4caf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f906acf030863e5d0ad4fbade71834e9cb7b0fb6a0872698781b3578e11230e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:34:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:34:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f906acf030863e5d0ad4fbade71834e9cb7b0fb6a0872698781b3578e11230e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01d329525cf838f47dcdd3a03baf5c837ea2e54dcddb579896e08ae6e7c4caf4"}
{"level":"info","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f906acf030863e5d0ad4fbade71834e9cb7b0fb6a0872698781b3578e11230e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01d329525cf838f47dcdd3a03baf5c837ea2e54dcddb579896e08ae6e7c4caf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:34:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:34:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01d329525cf838f47dcdd3a03baf5c837ea2e54dcddb579896e08ae6e7c4caf4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f906acf030863e5d0ad4fbade71834e9cb7b0fb6a0872698781b3578e11230e"}
{"level":"info","ts":"2026-07-07T18:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01d329525cf838f47dcdd3a03baf5c837ea2e54dcddb579896e08ae6e7c4caf4"}
{"level":"info","ts":"2026-07-07T18:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01d329525cf838f47dcdd3a03baf5c837ea2e54dcddb579896e08ae6e7c4caf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f906acf030863e5d0ad4fbade71834e9cb7b0fb6a0872698781b3578e11230e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:34:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:34:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f906acf030863e5d0ad4fbade71834e9cb7b0fb6a0872698781b3578e11230e"}
{"level":"info","ts":"2026-07-07T18:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f906acf030863e5d0ad4fbade71834e9cb7b0fb6a0872698781b3578e11230e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42ad3d8331ad1fb514e52d1bfb498313c17ab733831b2ae92324d00ab20cfdca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:34:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:34:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01d329525cf838f47dcdd3a03baf5c837ea2e54dcddb579896e08ae6e7c4caf4"}
{"level":"info","ts":"2026-07-07T18:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42ad3d8331ad1fb514e52d1bfb498313c17ab733831b2ae92324d00ab20cfdca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01d329525cf838f47dcdd3a03baf5c837ea2e54dcddb579896e08ae6e7c4caf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f906acf030863e5d0ad4fbade71834e9cb7b0fb6a0872698781b3578e11230e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:34:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:34:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f906acf030863e5d0ad4fbade71834e9cb7b0fb6a0872698781b3578e11230e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42ad3d8331ad1fb514e52d1bfb498313c17ab733831b2ae92324d00ab20cfdca"}
{"level":"info","ts":"2026-07-07T18:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f906acf030863e5d0ad4fbade71834e9cb7b0fb6a0872698781b3578e11230e"}
{"level":"info","ts":"2026-07-07T18:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f906acf030863e5d0ad4fbade71834e9cb7b0fb6a0872698781b3578e11230e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42ad3d8331ad1fb514e52d1bfb498313c17ab733831b2ae92324d00ab20cfdca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:34:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:34:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42ad3d8331ad1fb514e52d1bfb498313c17ab733831b2ae92324d00ab20cfdca"}
{"level":"info","ts":"2026-07-07T18:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42ad3d8331ad1fb514e52d1bfb498313c17ab733831b2ae92324d00ab20cfdca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f906acf030863e5d0ad4fbade71834e9cb7b0fb6a0872698781b3578e11230e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:34:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:34:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f906acf030863e5d0ad4fbade71834e9cb7b0fb6a0872698781b3578e11230e"}
{"level":"info","ts":"2026-07-07T18:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42ad3d8331ad1fb514e52d1bfb498313c17ab733831b2ae92324d00ab20cfdca"}
{"level":"info","ts":"2026-07-07T18:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f906acf030863e5d0ad4fbade71834e9cb7b0fb6a0872698781b3578e11230e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42ad3d8331ad1fb514e52d1bfb498313c17ab733831b2ae92324d00ab20cfdca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:34:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:34:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42ad3d8331ad1fb514e52d1bfb498313c17ab733831b2ae92324d00ab20cfdca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63b2f31ef20120e800f0ee145ba8327adcadec22d0e3c0959c989cffa944925b"}
{"level":"info","ts":"2026-07-07T18:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42ad3d8331ad1fb514e52d1bfb498313c17ab733831b2ae92324d00ab20cfdca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63b2f31ef20120e800f0ee145ba8327adcadec22d0e3c0959c989cffa944925b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:34:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:34:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63b2f31ef20120e800f0ee145ba8327adcadec22d0e3c0959c989cffa944925b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f906acf030863e5d0ad4fbade71834e9cb7b0fb6a0872698781b3578e11230e"}
{"level":"info","ts":"2026-07-07T18:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63b2f31ef20120e800f0ee145ba8327adcadec22d0e3c0959c989cffa944925b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f906acf030863e5d0ad4fbade71834e9cb7b0fb6a0872698781b3578e11230e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:34:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:34:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f906acf030863e5d0ad4fbade71834e9cb7b0fb6a0872698781b3578e11230e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42ad3d8331ad1fb514e52d1bfb498313c17ab733831b2ae92324d00ab20cfdca"}
{"level":"info","ts":"2026-07-07T18:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f906acf030863e5d0ad4fbade71834e9cb7b0fb6a0872698781b3578e11230e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42ad3d8331ad1fb514e52d1bfb498313c17ab733831b2ae92324d00ab20cfdca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63b2f31ef20120e800f0ee145ba8327adcadec22d0e3c0959c989cffa944925b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:34:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:34:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63b2f31ef20120e800f0ee145ba8327adcadec22d0e3c0959c989cffa944925b"}
{"level":"info","ts":"2026-07-07T18:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63b2f31ef20120e800f0ee145ba8327adcadec22d0e3c0959c989cffa944925b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f906acf030863e5d0ad4fbade71834e9cb7b0fb6a0872698781b3578e11230e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:34:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:34:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f906acf030863e5d0ad4fbade71834e9cb7b0fb6a0872698781b3578e11230e"}
{"level":"info","ts":"2026-07-07T18:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f906acf030863e5d0ad4fbade71834e9cb7b0fb6a0872698781b3578e11230e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63b2f31ef20120e800f0ee145ba8327adcadec22d0e3c0959c989cffa944925b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f906acf030863e5d0ad4fbade71834e9cb7b0fb6a0872698781b3578e11230e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:34:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:34:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f906acf030863e5d0ad4fbade71834e9cb7b0fb6a0872698781b3578e11230e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f906acf030863e5d0ad4fbade71834e9cb7b0fb6a0872698781b3578e11230e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63b2f31ef20120e800f0ee145ba8327adcadec22d0e3c0959c989cffa944925b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f906acf030863e5d0ad4fbade71834e9cb7b0fb6a0872698781b3578e11230e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:34:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:34:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f906acf030863e5d0ad4fbade71834e9cb7b0fb6a0872698781b3578e11230e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63b2f31ef20120e800f0ee145ba8327adcadec22d0e3c0959c989cffa944925b"}
{"level":"error","ts":"2026-07-07T18:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9f906acf030863e5d0ad4fbade71834e9cb7b0fb6a0872698781b3578e11230e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9f906acf030863e5d0ad4fbade71834e9cb7b0fb6a0872698781b3578e11230e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T18:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f906acf030863e5d0ad4fbade71834e9cb7b0fb6a0872698781b3578e11230e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:34:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:34:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f906acf030863e5d0ad4fbade71834e9cb7b0fb6a0872698781b3578e11230e"}
{"level":"info","ts":"2026-07-07T18:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f906acf030863e5d0ad4fbade71834e9cb7b0fb6a0872698781b3578e11230e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63b2f31ef20120e800f0ee145ba8327adcadec22d0e3c0959c989cffa944925b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:34:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:34:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63b2f31ef20120e800f0ee145ba8327adcadec22d0e3c0959c989cffa944925b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63b2f31ef20120e800f0ee145ba8327adcadec22d0e3c0959c989cffa944925b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f906acf030863e5d0ad4fbade71834e9cb7b0fb6a0872698781b3578e11230e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63b2f31ef20120e800f0ee145ba8327adcadec22d0e3c0959c989cffa944925b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f906acf030863e5d0ad4fbade71834e9cb7b0fb6a0872698781b3578e11230e"}
{"level":"debug","ts":"2026-07-07T18:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f906acf030863e5d0ad4fbade71834e9cb7b0fb6a0872698781b3578e11230e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:34:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:34:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f906acf030863e5d0ad4fbade71834e9cb7b0fb6a0872698781b3578e11230e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63b2f31ef20120e800f0ee145ba8327adcadec22d0e3c0959c989cffa944925b"}
{"level":"info","ts":"2026-07-07T18:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f906acf030863e5d0ad4fbade71834e9cb7b0fb6a0872698781b3578e11230e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f906acf030863e5d0ad4fbade71834e9cb7b0fb6a0872698781b3578e11230e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:34:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:34:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f906acf030863e5d0ad4fbade71834e9cb7b0fb6a0872698781b3578e11230e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f906acf030863e5d0ad4fbade71834e9cb7b0fb6a0872698781b3578e11230e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f906acf030863e5d0ad4fbade71834e9cb7b0fb6a0872698781b3578e11230e"}
{"level":"debug","ts":"2026-07-07T18:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f906acf030863e5d0ad4fbade71834e9cb7b0fb6a0872698781b3578e11230e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f906acf030863e5d0ad4fbade71834e9cb7b0fb6a0872698781b3578e11230e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f906acf030863e5d0ad4fbade71834e9cb7b0fb6a0872698781b3578e11230e"}
{"level":"debug","ts":"2026-07-07T18:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f906acf030863e5d0ad4fbade71834e9cb7b0fb6a0872698781b3578e11230e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:34:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:34:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f906acf030863e5d0ad4fbade71834e9cb7b0fb6a0872698781b3578e11230e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f906acf030863e5d0ad4fbade71834e9cb7b0fb6a0872698781b3578e11230e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f906acf030863e5d0ad4fbade71834e9cb7b0fb6a0872698781b3578e11230e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f906acf030863e5d0ad4fbade71834e9cb7b0fb6a0872698781b3578e11230e"}
{"level":"debug","ts":"2026-07-07T18:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63b2f31ef20120e800f0ee145ba8327adcadec22d0e3c0959c989cffa944925b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:35:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:35:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63b2f31ef20120e800f0ee145ba8327adcadec22d0e3c0959c989cffa944925b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63b2f31ef20120e800f0ee145ba8327adcadec22d0e3c0959c989cffa944925b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63b2f31ef20120e800f0ee145ba8327adcadec22d0e3c0959c989cffa944925b"}
{"level":"debug","ts":"2026-07-07T18:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63b2f31ef20120e800f0ee145ba8327adcadec22d0e3c0959c989cffa944925b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63b2f31ef20120e800f0ee145ba8327adcadec22d0e3c0959c989cffa944925b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63b2f31ef20120e800f0ee145ba8327adcadec22d0e3c0959c989cffa944925b"}
{"level":"debug","ts":"2026-07-07T18:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63b2f31ef20120e800f0ee145ba8327adcadec22d0e3c0959c989cffa944925b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:35:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:35:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63b2f31ef20120e800f0ee145ba8327adcadec22d0e3c0959c989cffa944925b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63b2f31ef20120e800f0ee145ba8327adcadec22d0e3c0959c989cffa944925b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"673cdbad5df7b3cfa8aac6c2225841151a3f7946d95516619c62957be3589586","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:35:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:35:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"673cdbad5df7b3cfa8aac6c2225841151a3f7946d95516619c62957be3589586","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63b2f31ef20120e800f0ee145ba8327adcadec22d0e3c0959c989cffa944925b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"673cdbad5df7b3cfa8aac6c2225841151a3f7946d95516619c62957be3589586","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/673cdbad5df7b3cfa8aac6c2225841151a3f7946d95516619c62957be3589586"}
{"level":"debug","ts":"2026-07-07T18:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"673cdbad5df7b3cfa8aac6c2225841151a3f7946d95516619c62957be3589586","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:35:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:35:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["673cdbad5df7b3cfa8aac6c2225841151a3f7946d95516619c62957be3589586"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"673cdbad5df7b3cfa8aac6c2225841151a3f7946d95516619c62957be3589586","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"673cdbad5df7b3cfa8aac6c2225841151a3f7946d95516619c62957be3589586","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63b2f31ef20120e800f0ee145ba8327adcadec22d0e3c0959c989cffa944925b"}
{"level":"info","ts":"2026-07-07T18:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/673cdbad5df7b3cfa8aac6c2225841151a3f7946d95516619c62957be3589586"}
{"level":"info","ts":"2026-07-07T18:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/673cdbad5df7b3cfa8aac6c2225841151a3f7946d95516619c62957be3589586"}
{"level":"debug","ts":"2026-07-07T18:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"931ee8764973c652d4368fc774a1070cc059f325e76f2cab53b27a957c89066b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:35:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:35:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"931ee8764973c652d4368fc774a1070cc059f325e76f2cab53b27a957c89066b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"931ee8764973c652d4368fc774a1070cc059f325e76f2cab53b27a957c89066b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/931ee8764973c652d4368fc774a1070cc059f325e76f2cab53b27a957c89066b"}
{"level":"debug","ts":"2026-07-07T18:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"931ee8764973c652d4368fc774a1070cc059f325e76f2cab53b27a957c89066b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"931ee8764973c652d4368fc774a1070cc059f325e76f2cab53b27a957c89066b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/931ee8764973c652d4368fc774a1070cc059f325e76f2cab53b27a957c89066b"}
{"level":"debug","ts":"2026-07-07T18:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"931ee8764973c652d4368fc774a1070cc059f325e76f2cab53b27a957c89066b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:35:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:35:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["931ee8764973c652d4368fc774a1070cc059f325e76f2cab53b27a957c89066b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"931ee8764973c652d4368fc774a1070cc059f325e76f2cab53b27a957c89066b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f906acf030863e5d0ad4fbade71834e9cb7b0fb6a0872698781b3578e11230e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:35:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:35:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f906acf030863e5d0ad4fbade71834e9cb7b0fb6a0872698781b3578e11230e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"931ee8764973c652d4368fc774a1070cc059f325e76f2cab53b27a957c89066b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f906acf030863e5d0ad4fbade71834e9cb7b0fb6a0872698781b3578e11230e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f906acf030863e5d0ad4fbade71834e9cb7b0fb6a0872698781b3578e11230e"}
{"level":"debug","ts":"2026-07-07T18:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f906acf030863e5d0ad4fbade71834e9cb7b0fb6a0872698781b3578e11230e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:35:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:35:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f906acf030863e5d0ad4fbade71834e9cb7b0fb6a0872698781b3578e11230e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f906acf030863e5d0ad4fbade71834e9cb7b0fb6a0872698781b3578e11230e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f906acf030863e5d0ad4fbade71834e9cb7b0fb6a0872698781b3578e11230e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/931ee8764973c652d4368fc774a1070cc059f325e76f2cab53b27a957c89066b"}
{"level":"info","ts":"2026-07-07T18:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f906acf030863e5d0ad4fbade71834e9cb7b0fb6a0872698781b3578e11230e"}
{"level":"debug","ts":"2026-07-07T18:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5433941fb23921b4779870e22474bd0483f3b87320f5ba029a131fe8e34f63e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:35:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:35:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5433941fb23921b4779870e22474bd0483f3b87320f5ba029a131fe8e34f63e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5433941fb23921b4779870e22474bd0483f3b87320f5ba029a131fe8e34f63e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5433941fb23921b4779870e22474bd0483f3b87320f5ba029a131fe8e34f63e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5433941fb23921b4779870e22474bd0483f3b87320f5ba029a131fe8e34f63e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5433941fb23921b4779870e22474bd0483f3b87320f5ba029a131fe8e34f63e"}
{"level":"debug","ts":"2026-07-07T18:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5433941fb23921b4779870e22474bd0483f3b87320f5ba029a131fe8e34f63e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5433941fb23921b4779870e22474bd0483f3b87320f5ba029a131fe8e34f63e"}
{"level":"debug","ts":"2026-07-07T18:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c07c060b8ca340eab7d5648f64ca1514e12cb2a9378864fa15656f25abf9e9e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:35:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:35:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c07c060b8ca340eab7d5648f64ca1514e12cb2a9378864fa15656f25abf9e9e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c07c060b8ca340eab7d5648f64ca1514e12cb2a9378864fa15656f25abf9e9e9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c07c060b8ca340eab7d5648f64ca1514e12cb2a9378864fa15656f25abf9e9e9"}
{"level":"debug","ts":"2026-07-07T18:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c07c060b8ca340eab7d5648f64ca1514e12cb2a9378864fa15656f25abf9e9e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c07c060b8ca340eab7d5648f64ca1514e12cb2a9378864fa15656f25abf9e9e9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c07c060b8ca340eab7d5648f64ca1514e12cb2a9378864fa15656f25abf9e9e9"}
{"level":"debug","ts":"2026-07-07T18:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5433941fb23921b4779870e22474bd0483f3b87320f5ba029a131fe8e34f63e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:35:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:35:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5433941fb23921b4779870e22474bd0483f3b87320f5ba029a131fe8e34f63e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5433941fb23921b4779870e22474bd0483f3b87320f5ba029a131fe8e34f63e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c07c060b8ca340eab7d5648f64ca1514e12cb2a9378864fa15656f25abf9e9e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:35:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:35:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c07c060b8ca340eab7d5648f64ca1514e12cb2a9378864fa15656f25abf9e9e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c07c060b8ca340eab7d5648f64ca1514e12cb2a9378864fa15656f25abf9e9e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5433941fb23921b4779870e22474bd0483f3b87320f5ba029a131fe8e34f63e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:35:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:35:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5433941fb23921b4779870e22474bd0483f3b87320f5ba029a131fe8e34f63e"}
{"level":"info","ts":"2026-07-07T18:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5433941fb23921b4779870e22474bd0483f3b87320f5ba029a131fe8e34f63e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c07c060b8ca340eab7d5648f64ca1514e12cb2a9378864fa15656f25abf9e9e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:35:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:35:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c07c060b8ca340eab7d5648f64ca1514e12cb2a9378864fa15656f25abf9e9e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5433941fb23921b4779870e22474bd0483f3b87320f5ba029a131fe8e34f63e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:35:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:35:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5433941fb23921b4779870e22474bd0483f3b87320f5ba029a131fe8e34f63e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c07c060b8ca340eab7d5648f64ca1514e12cb2a9378864fa15656f25abf9e9e9"}
{"level":"info","ts":"2026-07-07T18:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5433941fb23921b4779870e22474bd0483f3b87320f5ba029a131fe8e34f63e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c07c060b8ca340eab7d5648f64ca1514e12cb2a9378864fa15656f25abf9e9e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:35:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:35:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c07c060b8ca340eab7d5648f64ca1514e12cb2a9378864fa15656f25abf9e9e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5433941fb23921b4779870e22474bd0483f3b87320f5ba029a131fe8e34f63e"}
{"level":"info","ts":"2026-07-07T18:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c07c060b8ca340eab7d5648f64ca1514e12cb2a9378864fa15656f25abf9e9e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5433941fb23921b4779870e22474bd0483f3b87320f5ba029a131fe8e34f63e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c07c060b8ca340eab7d5648f64ca1514e12cb2a9378864fa15656f25abf9e9e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:35:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:35:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c07c060b8ca340eab7d5648f64ca1514e12cb2a9378864fa15656f25abf9e9e9"}
{"level":"info","ts":"2026-07-07T18:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c07c060b8ca340eab7d5648f64ca1514e12cb2a9378864fa15656f25abf9e9e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c07c060b8ca340eab7d5648f64ca1514e12cb2a9378864fa15656f25abf9e9e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:35:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:35:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c07c060b8ca340eab7d5648f64ca1514e12cb2a9378864fa15656f25abf9e9e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c07c060b8ca340eab7d5648f64ca1514e12cb2a9378864fa15656f25abf9e9e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a30514bb9fb2e5c3795f74c9017e5be227d0157ac9a708eedbe5ebede08251f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c07c060b8ca340eab7d5648f64ca1514e12cb2a9378864fa15656f25abf9e9e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:35:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:35:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c07c060b8ca340eab7d5648f64ca1514e12cb2a9378864fa15656f25abf9e9e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5433941fb23921b4779870e22474bd0483f3b87320f5ba029a131fe8e34f63e"}
{"level":"error","ts":"2026-07-07T18:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c07c060b8ca340eab7d5648f64ca1514e12cb2a9378864fa15656f25abf9e9e9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c07c060b8ca340eab7d5648f64ca1514e12cb2a9378864fa15656f25abf9e9e9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T18:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c07c060b8ca340eab7d5648f64ca1514e12cb2a9378864fa15656f25abf9e9e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:35:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:35:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c07c060b8ca340eab7d5648f64ca1514e12cb2a9378864fa15656f25abf9e9e9"}
{"level":"info","ts":"2026-07-07T18:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c07c060b8ca340eab7d5648f64ca1514e12cb2a9378864fa15656f25abf9e9e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56ff444858977ec1fd96755721d2204ee169d7c45e06cd5e36a207565f978e9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c07c060b8ca340eab7d5648f64ca1514e12cb2a9378864fa15656f25abf9e9e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c07c060b8ca340eab7d5648f64ca1514e12cb2a9378864fa15656f25abf9e9e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:35:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:35:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c07c060b8ca340eab7d5648f64ca1514e12cb2a9378864fa15656f25abf9e9e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c07c060b8ca340eab7d5648f64ca1514e12cb2a9378864fa15656f25abf9e9e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c38fd928142146dd0c2d7e0e81cbf54ac357f687349eebeac79c86d79255d123","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c07c060b8ca340eab7d5648f64ca1514e12cb2a9378864fa15656f25abf9e9e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:35:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:35:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c07c060b8ca340eab7d5648f64ca1514e12cb2a9378864fa15656f25abf9e9e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a30514bb9fb2e5c3795f74c9017e5be227d0157ac9a708eedbe5ebede08251f2"}
{"level":"error","ts":"2026-07-07T18:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c07c060b8ca340eab7d5648f64ca1514e12cb2a9378864fa15656f25abf9e9e9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c07c060b8ca340eab7d5648f64ca1514e12cb2a9378864fa15656f25abf9e9e9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T18:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c07c060b8ca340eab7d5648f64ca1514e12cb2a9378864fa15656f25abf9e9e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c07c060b8ca340eab7d5648f64ca1514e12cb2a9378864fa15656f25abf9e9e9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56ff444858977ec1fd96755721d2204ee169d7c45e06cd5e36a207565f978e9b"}
{"level":"debug","ts":"2026-07-07T18:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1dee7f72bb8a71da5bd0897d824170e366f7f30ea843a61eb626d76e83f9d164","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c07c060b8ca340eab7d5648f64ca1514e12cb2a9378864fa15656f25abf9e9e9"}
{"level":"debug","ts":"2026-07-07T18:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c2c24d1c96c830b77dc06f6523b0105969913c58cc2d046895e43470ccd8472","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c38fd928142146dd0c2d7e0e81cbf54ac357f687349eebeac79c86d79255d123"}
{"level":"debug","ts":"2026-07-07T18:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a166df2b33d22fd52a663fb21df71779fa3428e6bd942ef0368ed9c6eaac187","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1dee7f72bb8a71da5bd0897d824170e366f7f30ea843a61eb626d76e83f9d164"}
{"level":"debug","ts":"2026-07-07T18:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24d20cdc69688a666575d3ba2b477953d27cb35e84fd59ff807bb9750f61560d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c2c24d1c96c830b77dc06f6523b0105969913c58cc2d046895e43470ccd8472"}
{"level":"info","ts":"2026-07-07T18:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a166df2b33d22fd52a663fb21df71779fa3428e6bd942ef0368ed9c6eaac187"}
{"level":"debug","ts":"2026-07-07T18:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9c182abb05589fdaa6e7edcd0ea6244e050db80029590e554912f7cd441591f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01d329525cf838f47dcdd3a03baf5c837ea2e54dcddb579896e08ae6e7c4caf4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24d20cdc69688a666575d3ba2b477953d27cb35e84fd59ff807bb9750f61560d"}
{"level":"debug","ts":"2026-07-07T18:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"341df337fdb6c76c4667771ef7ebc010ac902630d235c1f08796b3a0ae031283","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9c182abb05589fdaa6e7edcd0ea6244e050db80029590e554912f7cd441591f"}
{"level":"debug","ts":"2026-07-07T18:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"858427b36ee01a2e80759bdcb9b4d6a8b3ad0b1fda11601c2572b61c61897f21","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01d329525cf838f47dcdd3a03baf5c837ea2e54dcddb579896e08ae6e7c4caf4"}
{"level":"debug","ts":"2026-07-07T18:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a638544a7b4453c24e7e35deee0f8c4e811435fe0a55fcf19a4fdbc6e82e4db4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/341df337fdb6c76c4667771ef7ebc010ac902630d235c1f08796b3a0ae031283"}
{"level":"debug","ts":"2026-07-07T18:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42ad3d8331ad1fb514e52d1bfb498313c17ab733831b2ae92324d00ab20cfdca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/858427b36ee01a2e80759bdcb9b4d6a8b3ad0b1fda11601c2572b61c61897f21"}
{"level":"debug","ts":"2026-07-07T18:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c7d4e41ddb1bd416f2d5908a7bb8464816d48c020133e80633d04485d41709e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a638544a7b4453c24e7e35deee0f8c4e811435fe0a55fcf19a4fdbc6e82e4db4"}
{"level":"info","ts":"2026-07-07T18:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42ad3d8331ad1fb514e52d1bfb498313c17ab733831b2ae92324d00ab20cfdca"}
{"level":"info","ts":"2026-07-07T18:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c7d4e41ddb1bd416f2d5908a7bb8464816d48c020133e80633d04485d41709e"}
{"level":"info","ts":"2026-07-07T18:35:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a279d2fb-79be-4027-8b6f-111022d2da5f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:40654","PortSpecifier":{"PortValue":40654}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a279d2fb-79be-4027-8b6f-111022d2da5f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2b5160.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:35:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a279d2fb-79be-4027-8b6f-111022d2da5f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:40654","PortSpecifier":{"PortValue":40654}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783449310,"nanos":332829556},"http":{"id":"a279d2fb-79be-4027-8b6f-111022d2da5f","method":"POST","headers":{":authority":"e2e-shared-a-2b5160.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:35:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a279d2fb-79be-4027-8b6f-111022d2da5f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T18:35:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a279d2fb-79be-4027-8b6f-111022d2da5f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"13165771-7ad0-4fee-91b3-c3ee0a976429","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d354d02-b562-46f4-8cbc-cd983e35664b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/67bf82c58916"]}}
{"level":"debug","ts":"2026-07-07T18:35:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a279d2fb-79be-4027-8b6f-111022d2da5f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/67bf82c58916"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d354d02-b562-46f4-8cbc-cd983e35664b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"13165771-7ad0-4fee-91b3-c3ee0a976429","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6c7d4e41ddb1bd416f2d5908a7bb8464816d48c020133e80633d04485d41709e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2b5160.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:35:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a279d2fb-79be-4027-8b6f-111022d2da5f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:35:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a279d2fb-79be-4027-8b6f-111022d2da5f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:35:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a279d2fb-79be-4027-8b6f-111022d2da5f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2b5160/rate-test-model-2b5160\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:35:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a279d2fb-79be-4027-8b6f-111022d2da5f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T18:35:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a279d2fb-79be-4027-8b6f-111022d2da5f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T18:35:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a279d2fb-79be-4027-8b6f-111022d2da5f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T18:35:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a279d2fb-79be-4027-8b6f-111022d2da5f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:35:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a279d2fb-79be-4027-8b6f-111022d2da5f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:35:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bd15f6aa-232a-4eb1-bb41-c15c3df0b5e2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:37474","PortSpecifier":{"PortValue":37474}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bd15f6aa-232a-4eb1-bb41-c15c3df0b5e2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-200b05.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:35:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bd15f6aa-232a-4eb1-bb41-c15c3df0b5e2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:37474","PortSpecifier":{"PortValue":37474}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783449310,"nanos":376986064},"http":{"id":"bd15f6aa-232a-4eb1-bb41-c15c3df0b5e2","method":"POST","headers":{":authority":"e2e-shared-b-200b05.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:35:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bd15f6aa-232a-4eb1-bb41-c15c3df0b5e2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T18:35:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bd15f6aa-232a-4eb1-bb41-c15c3df0b5e2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"13165771-7ad0-4fee-91b3-c3ee0a976429","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d354d02-b562-46f4-8cbc-cd983e35664b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/67bf82c58916"]}}
{"level":"debug","ts":"2026-07-07T18:35:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bd15f6aa-232a-4eb1-bb41-c15c3df0b5e2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/67bf82c58916"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d354d02-b562-46f4-8cbc-cd983e35664b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"13165771-7ad0-4fee-91b3-c3ee0a976429","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a9c182abb05589fdaa6e7edcd0ea6244e050db80029590e554912f7cd441591f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-200b05.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:35:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bd15f6aa-232a-4eb1-bb41-c15c3df0b5e2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:35:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bd15f6aa-232a-4eb1-bb41-c15c3df0b5e2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:35:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bd15f6aa-232a-4eb1-bb41-c15c3df0b5e2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-200b05/rate-test-model-200b05\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:35:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bd15f6aa-232a-4eb1-bb41-c15c3df0b5e2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T18:35:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bd15f6aa-232a-4eb1-bb41-c15c3df0b5e2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T18:35:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bd15f6aa-232a-4eb1-bb41-c15c3df0b5e2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T18:35:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bd15f6aa-232a-4eb1-bb41-c15c3df0b5e2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:35:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bd15f6aa-232a-4eb1-bb41-c15c3df0b5e2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:35:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"31c16305-938d-41b0-8ce7-59290f501ff6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:40670","PortSpecifier":{"PortValue":40670}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"31c16305-938d-41b0-8ce7-59290f501ff6","method":"POST","path":"/ai-tenant-e2e-shared-a-2b5160/rate-test-model-2b5160/v1/completions","host":"e2e-shared-a-2b5160.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:35:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"31c16305-938d-41b0-8ce7-59290f501ff6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:40670","PortSpecifier":{"PortValue":40670}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783449310,"nanos":419634447},"http":{"id":"31c16305-938d-41b0-8ce7-59290f501ff6","method":"POST","headers":{":authority":"e2e-shared-a-2b5160.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2b5160/rate-test-model-2b5160/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:35:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"31c16305-938d-41b0-8ce7-59290f501ff6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1WtnYjiEtfGqAva7z_GMY6tEMMHS17iT3tV3uALSp1FgDhTAuV9JgxDPiPWfs"}
{"level":"debug","ts":"2026-07-07T18:35:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"31c16305-938d-41b0-8ce7-59290f501ff6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2b5160.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1WtnYjiEtfGqAva7z_GMY6tEMMHS17iT3tV3uALSp1FgDhTAuV9JgxDPiPWfs\"}"}
{"level":"debug","ts":"2026-07-07T18:35:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"31c16305-938d-41b0-8ce7-59290f501ff6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2b5160.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4a54f008-b612-42b6-8cf7-9a1feda043d1","keyName":"e2e-rate-a-6b0a83","subscription":"e2e-rate-iso-a-6b0a83","tenant":"e2e-shared-a-2b5160","userId":"4a54f008-b612-42b6-8cf7-9a1feda043d1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T18:35:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"31c16305-938d-41b0-8ce7-59290f501ff6","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2b5160.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2b5160/rate-test-model-2b5160\",\"requestedSubscription\":\"e2e-rate-iso-a-6b0a83\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T18:35:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"31c16305-938d-41b0-8ce7-59290f501ff6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2b5160.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2b5160","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6b0a83","namespace":"ai-tenant-e2e-shared-a-2b5160","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T18:35:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"31c16305-938d-41b0-8ce7-59290f501ff6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:35:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31c16305-938d-41b0-8ce7-59290f501ff6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:35:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31c16305-938d-41b0-8ce7-59290f501ff6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:35:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31c16305-938d-41b0-8ce7-59290f501ff6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:35:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31c16305-938d-41b0-8ce7-59290f501ff6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2b5160/rate-test-model-2b5160\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:35:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31c16305-938d-41b0-8ce7-59290f501ff6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T18:35:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31c16305-938d-41b0-8ce7-59290f501ff6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6b0a83"}
{"level":"debug","ts":"2026-07-07T18:35:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31c16305-938d-41b0-8ce7-59290f501ff6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T18:35:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31c16305-938d-41b0-8ce7-59290f501ff6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4a54f008-b612-42b6-8cf7-9a1feda043d1","keyName":"e2e-rate-a-6b0a83","selected_subscription":"e2e-rate-iso-a-6b0a83","selected_subscription_key":"ai-tenant-e2e-shared-a-2b5160/e2e-rate-iso-a-6b0a83@ai-tenant-e2e-shared-a-2b5160/rate-test-model-2b5160","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2b5160","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6b0a83","namespace":"ai-tenant-e2e-shared-a-2b5160","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T18:35:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"31c16305-938d-41b0-8ce7-59290f501ff6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:35:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"31c16305-938d-41b0-8ce7-59290f501ff6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:35:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1c192155-a7a4-4515-8c31-0368a3778ba2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:40678","PortSpecifier":{"PortValue":40678}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1c192155-a7a4-4515-8c31-0368a3778ba2","method":"POST","path":"/ai-tenant-e2e-shared-a-2b5160/rate-test-model-2b5160/v1/completions","host":"e2e-shared-a-2b5160.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:35:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1c192155-a7a4-4515-8c31-0368a3778ba2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:40678","PortSpecifier":{"PortValue":40678}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783449311,"nanos":486890840},"http":{"id":"1c192155-a7a4-4515-8c31-0368a3778ba2","method":"POST","headers":{":authority":"e2e-shared-a-2b5160.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2b5160/rate-test-model-2b5160/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:35:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1c192155-a7a4-4515-8c31-0368a3778ba2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1WtnYjiEtfGqAva7z_GMY6tEMMHS17iT3tV3uALSp1FgDhTAuV9JgxDPiPWfs"}
{"level":"debug","ts":"2026-07-07T18:35:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1c192155-a7a4-4515-8c31-0368a3778ba2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2b5160.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1WtnYjiEtfGqAva7z_GMY6tEMMHS17iT3tV3uALSp1FgDhTAuV9JgxDPiPWfs\"}"}
{"level":"debug","ts":"2026-07-07T18:35:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1c192155-a7a4-4515-8c31-0368a3778ba2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2b5160.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4a54f008-b612-42b6-8cf7-9a1feda043d1","keyName":"e2e-rate-a-6b0a83","subscription":"e2e-rate-iso-a-6b0a83","tenant":"e2e-shared-a-2b5160","userId":"4a54f008-b612-42b6-8cf7-9a1feda043d1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T18:35:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1c192155-a7a4-4515-8c31-0368a3778ba2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2b5160.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2b5160/rate-test-model-2b5160\",\"requestedSubscription\":\"e2e-rate-iso-a-6b0a83\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T18:35:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1c192155-a7a4-4515-8c31-0368a3778ba2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2b5160.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2b5160","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6b0a83","namespace":"ai-tenant-e2e-shared-a-2b5160","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T18:35:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1c192155-a7a4-4515-8c31-0368a3778ba2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:35:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c192155-a7a4-4515-8c31-0368a3778ba2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:35:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c192155-a7a4-4515-8c31-0368a3778ba2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:35:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c192155-a7a4-4515-8c31-0368a3778ba2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:35:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c192155-a7a4-4515-8c31-0368a3778ba2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2b5160/rate-test-model-2b5160\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:35:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1c192155-a7a4-4515-8c31-0368a3778ba2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T18:35:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1c192155-a7a4-4515-8c31-0368a3778ba2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T18:35:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1c192155-a7a4-4515-8c31-0368a3778ba2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6b0a83"}
{"level":"debug","ts":"2026-07-07T18:35:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1c192155-a7a4-4515-8c31-0368a3778ba2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4a54f008-b612-42b6-8cf7-9a1feda043d1","keyName":"e2e-rate-a-6b0a83","selected_subscription":"e2e-rate-iso-a-6b0a83","selected_subscription_key":"ai-tenant-e2e-shared-a-2b5160/e2e-rate-iso-a-6b0a83@ai-tenant-e2e-shared-a-2b5160/rate-test-model-2b5160","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2b5160","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6b0a83","namespace":"ai-tenant-e2e-shared-a-2b5160","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T18:35:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1c192155-a7a4-4515-8c31-0368a3778ba2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:35:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1c192155-a7a4-4515-8c31-0368a3778ba2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:35:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"85c46e4a-8ada-4f35-8b2f-609efbe1e90b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:40690","PortSpecifier":{"PortValue":40690}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"85c46e4a-8ada-4f35-8b2f-609efbe1e90b","method":"POST","path":"/ai-tenant-e2e-shared-a-2b5160/rate-test-model-2b5160/v1/completions","host":"e2e-shared-a-2b5160.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:35:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"85c46e4a-8ada-4f35-8b2f-609efbe1e90b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:40690","PortSpecifier":{"PortValue":40690}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783449312,"nanos":529140701},"http":{"id":"85c46e4a-8ada-4f35-8b2f-609efbe1e90b","method":"POST","headers":{":authority":"e2e-shared-a-2b5160.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2b5160/rate-test-model-2b5160/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:35:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"85c46e4a-8ada-4f35-8b2f-609efbe1e90b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1WtnYjiEtfGqAva7z_GMY6tEMMHS17iT3tV3uALSp1FgDhTAuV9JgxDPiPWfs"}
{"level":"debug","ts":"2026-07-07T18:35:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"85c46e4a-8ada-4f35-8b2f-609efbe1e90b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2b5160.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1WtnYjiEtfGqAva7z_GMY6tEMMHS17iT3tV3uALSp1FgDhTAuV9JgxDPiPWfs\"}"}
{"level":"debug","ts":"2026-07-07T18:35:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"85c46e4a-8ada-4f35-8b2f-609efbe1e90b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2b5160.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4a54f008-b612-42b6-8cf7-9a1feda043d1","keyName":"e2e-rate-a-6b0a83","subscription":"e2e-rate-iso-a-6b0a83","tenant":"e2e-shared-a-2b5160","userId":"4a54f008-b612-42b6-8cf7-9a1feda043d1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T18:35:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"85c46e4a-8ada-4f35-8b2f-609efbe1e90b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2b5160.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2b5160/rate-test-model-2b5160\",\"requestedSubscription\":\"e2e-rate-iso-a-6b0a83\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T18:35:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"85c46e4a-8ada-4f35-8b2f-609efbe1e90b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2b5160.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2b5160","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6b0a83","namespace":"ai-tenant-e2e-shared-a-2b5160","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T18:35:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"85c46e4a-8ada-4f35-8b2f-609efbe1e90b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:35:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"85c46e4a-8ada-4f35-8b2f-609efbe1e90b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:35:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"85c46e4a-8ada-4f35-8b2f-609efbe1e90b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:35:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"85c46e4a-8ada-4f35-8b2f-609efbe1e90b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2b5160/rate-test-model-2b5160\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:35:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"85c46e4a-8ada-4f35-8b2f-609efbe1e90b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:35:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"85c46e4a-8ada-4f35-8b2f-609efbe1e90b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T18:35:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"85c46e4a-8ada-4f35-8b2f-609efbe1e90b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6b0a83"}
{"level":"debug","ts":"2026-07-07T18:35:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"85c46e4a-8ada-4f35-8b2f-609efbe1e90b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T18:35:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"85c46e4a-8ada-4f35-8b2f-609efbe1e90b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4a54f008-b612-42b6-8cf7-9a1feda043d1","keyName":"e2e-rate-a-6b0a83","selected_subscription":"e2e-rate-iso-a-6b0a83","selected_subscription_key":"ai-tenant-e2e-shared-a-2b5160/e2e-rate-iso-a-6b0a83@ai-tenant-e2e-shared-a-2b5160/rate-test-model-2b5160","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2b5160","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6b0a83","namespace":"ai-tenant-e2e-shared-a-2b5160","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T18:35:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"85c46e4a-8ada-4f35-8b2f-609efbe1e90b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:35:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"85c46e4a-8ada-4f35-8b2f-609efbe1e90b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:35:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a7144cef-c617-46bd-a7cb-92c94fdc98d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:33600","PortSpecifier":{"PortValue":33600}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a7144cef-c617-46bd-a7cb-92c94fdc98d2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2b5160.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:35:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a7144cef-c617-46bd-a7cb-92c94fdc98d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:33600","PortSpecifier":{"PortValue":33600}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783449323,"nanos":484465054},"http":{"id":"a7144cef-c617-46bd-a7cb-92c94fdc98d2","method":"POST","headers":{":authority":"e2e-shared-a-2b5160.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:35:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a7144cef-c617-46bd-a7cb-92c94fdc98d2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T18:35:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a7144cef-c617-46bd-a7cb-92c94fdc98d2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"13165771-7ad0-4fee-91b3-c3ee0a976429","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d354d02-b562-46f4-8cbc-cd983e35664b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/67bf82c58916"]}}
{"level":"debug","ts":"2026-07-07T18:35:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a7144cef-c617-46bd-a7cb-92c94fdc98d2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/67bf82c58916"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d354d02-b562-46f4-8cbc-cd983e35664b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"13165771-7ad0-4fee-91b3-c3ee0a976429","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6c7d4e41ddb1bd416f2d5908a7bb8464816d48c020133e80633d04485d41709e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2b5160.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:35:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a7144cef-c617-46bd-a7cb-92c94fdc98d2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:35:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a7144cef-c617-46bd-a7cb-92c94fdc98d2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:35:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a7144cef-c617-46bd-a7cb-92c94fdc98d2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2b5160/rate-test-model-2b5160\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:35:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a7144cef-c617-46bd-a7cb-92c94fdc98d2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T18:35:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a7144cef-c617-46bd-a7cb-92c94fdc98d2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T18:35:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a7144cef-c617-46bd-a7cb-92c94fdc98d2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T18:35:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a7144cef-c617-46bd-a7cb-92c94fdc98d2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:35:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a7144cef-c617-46bd-a7cb-92c94fdc98d2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:35:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"56c0ae64-f21c-44dd-9148-647e0f33652f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:51512","PortSpecifier":{"PortValue":51512}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"56c0ae64-f21c-44dd-9148-647e0f33652f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-200b05.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:35:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"56c0ae64-f21c-44dd-9148-647e0f33652f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:51512","PortSpecifier":{"PortValue":51512}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783449323,"nanos":564682912},"http":{"id":"56c0ae64-f21c-44dd-9148-647e0f33652f","method":"POST","headers":{":authority":"e2e-shared-b-200b05.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:35:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"56c0ae64-f21c-44dd-9148-647e0f33652f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T18:35:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"56c0ae64-f21c-44dd-9148-647e0f33652f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"13165771-7ad0-4fee-91b3-c3ee0a976429","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d354d02-b562-46f4-8cbc-cd983e35664b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/67bf82c58916"]}}
{"level":"debug","ts":"2026-07-07T18:35:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"56c0ae64-f21c-44dd-9148-647e0f33652f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/67bf82c58916"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5d354d02-b562-46f4-8cbc-cd983e35664b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"13165771-7ad0-4fee-91b3-c3ee0a976429","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a9c182abb05589fdaa6e7edcd0ea6244e050db80029590e554912f7cd441591f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-200b05.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:35:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"56c0ae64-f21c-44dd-9148-647e0f33652f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:35:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"56c0ae64-f21c-44dd-9148-647e0f33652f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:35:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"56c0ae64-f21c-44dd-9148-647e0f33652f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-200b05/rate-test-model-200b05\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:35:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"56c0ae64-f21c-44dd-9148-647e0f33652f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T18:35:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"56c0ae64-f21c-44dd-9148-647e0f33652f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T18:35:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"56c0ae64-f21c-44dd-9148-647e0f33652f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T18:35:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"56c0ae64-f21c-44dd-9148-647e0f33652f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:35:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"56c0ae64-f21c-44dd-9148-647e0f33652f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:35:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ba0b26b-14bf-4670-bcfc-b7a0282ba037","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:33610","PortSpecifier":{"PortValue":33610}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8ba0b26b-14bf-4670-bcfc-b7a0282ba037","method":"POST","path":"/ai-tenant-e2e-shared-a-2b5160/rate-test-model-2b5160/v1/completions","host":"e2e-shared-a-2b5160.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:35:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ba0b26b-14bf-4670-bcfc-b7a0282ba037","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:33610","PortSpecifier":{"PortValue":33610}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783449323,"nanos":606848643},"http":{"id":"8ba0b26b-14bf-4670-bcfc-b7a0282ba037","method":"POST","headers":{":authority":"e2e-shared-a-2b5160.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2b5160/rate-test-model-2b5160/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:35:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8ba0b26b-14bf-4670-bcfc-b7a0282ba037","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-tUl3Kv9fJVO56538_1zXDZaOB8rs0lg7T2SXhTeOkR1io3h7nwZpzTQejfDK"}
{"level":"debug","ts":"2026-07-07T18:35:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8ba0b26b-14bf-4670-bcfc-b7a0282ba037","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2b5160.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-tUl3Kv9fJVO56538_1zXDZaOB8rs0lg7T2SXhTeOkR1io3h7nwZpzTQejfDK\"}"}
{"level":"debug","ts":"2026-07-07T18:35:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8ba0b26b-14bf-4670-bcfc-b7a0282ba037","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2b5160.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d55e9459-a381-4989-b7f2-ca5621b8a075","keyName":"e2e-rate-a-a32c9d","subscription":"e2e-rate-iso-a-a32c9d","tenant":"e2e-shared-a-2b5160","userId":"d55e9459-a381-4989-b7f2-ca5621b8a075","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T18:35:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8ba0b26b-14bf-4670-bcfc-b7a0282ba037","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2b5160.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2b5160/rate-test-model-2b5160\",\"requestedSubscription\":\"e2e-rate-iso-a-a32c9d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T18:35:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8ba0b26b-14bf-4670-bcfc-b7a0282ba037","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2b5160.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2b5160","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a32c9d","namespace":"ai-tenant-e2e-shared-a-2b5160","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T18:35:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8ba0b26b-14bf-4670-bcfc-b7a0282ba037","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:35:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ba0b26b-14bf-4670-bcfc-b7a0282ba037","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:35:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ba0b26b-14bf-4670-bcfc-b7a0282ba037","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:35:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ba0b26b-14bf-4670-bcfc-b7a0282ba037","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2b5160/rate-test-model-2b5160\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:35:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ba0b26b-14bf-4670-bcfc-b7a0282ba037","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:35:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ba0b26b-14bf-4670-bcfc-b7a0282ba037","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T18:35:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ba0b26b-14bf-4670-bcfc-b7a0282ba037","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a32c9d"}
{"level":"debug","ts":"2026-07-07T18:35:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ba0b26b-14bf-4670-bcfc-b7a0282ba037","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T18:35:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ba0b26b-14bf-4670-bcfc-b7a0282ba037","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d55e9459-a381-4989-b7f2-ca5621b8a075","keyName":"e2e-rate-a-a32c9d","selected_subscription":"e2e-rate-iso-a-a32c9d","selected_subscription_key":"ai-tenant-e2e-shared-a-2b5160/e2e-rate-iso-a-a32c9d@ai-tenant-e2e-shared-a-2b5160/rate-test-model-2b5160","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2b5160","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a32c9d","namespace":"ai-tenant-e2e-shared-a-2b5160","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T18:35:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ba0b26b-14bf-4670-bcfc-b7a0282ba037","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:35:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ba0b26b-14bf-4670-bcfc-b7a0282ba037","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:35:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1676dd88-a32d-4628-bd1f-36a562400373","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:33616","PortSpecifier":{"PortValue":33616}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1676dd88-a32d-4628-bd1f-36a562400373","method":"POST","path":"/ai-tenant-e2e-shared-a-2b5160/rate-test-model-2b5160/v1/completions","host":"e2e-shared-a-2b5160.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:35:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1676dd88-a32d-4628-bd1f-36a562400373","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:33616","PortSpecifier":{"PortValue":33616}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783449324,"nanos":652446972},"http":{"id":"1676dd88-a32d-4628-bd1f-36a562400373","method":"POST","headers":{":authority":"e2e-shared-a-2b5160.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2b5160/rate-test-model-2b5160/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:35:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1676dd88-a32d-4628-bd1f-36a562400373","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-tUl3Kv9fJVO56538_1zXDZaOB8rs0lg7T2SXhTeOkR1io3h7nwZpzTQejfDK"}
{"level":"debug","ts":"2026-07-07T18:35:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1676dd88-a32d-4628-bd1f-36a562400373","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2b5160.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-tUl3Kv9fJVO56538_1zXDZaOB8rs0lg7T2SXhTeOkR1io3h7nwZpzTQejfDK\"}"}
{"level":"debug","ts":"2026-07-07T18:35:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1676dd88-a32d-4628-bd1f-36a562400373","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2b5160.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d55e9459-a381-4989-b7f2-ca5621b8a075","keyName":"e2e-rate-a-a32c9d","subscription":"e2e-rate-iso-a-a32c9d","tenant":"e2e-shared-a-2b5160","userId":"d55e9459-a381-4989-b7f2-ca5621b8a075","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T18:35:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1676dd88-a32d-4628-bd1f-36a562400373","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2b5160.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2b5160/rate-test-model-2b5160\",\"requestedSubscription\":\"e2e-rate-iso-a-a32c9d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T18:35:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1676dd88-a32d-4628-bd1f-36a562400373","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2b5160.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2b5160","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a32c9d","namespace":"ai-tenant-e2e-shared-a-2b5160","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T18:35:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1676dd88-a32d-4628-bd1f-36a562400373","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:35:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1676dd88-a32d-4628-bd1f-36a562400373","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:35:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1676dd88-a32d-4628-bd1f-36a562400373","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:35:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1676dd88-a32d-4628-bd1f-36a562400373","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2b5160/rate-test-model-2b5160\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:35:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1676dd88-a32d-4628-bd1f-36a562400373","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:35:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1676dd88-a32d-4628-bd1f-36a562400373","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T18:35:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1676dd88-a32d-4628-bd1f-36a562400373","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a32c9d"}
{"level":"debug","ts":"2026-07-07T18:35:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1676dd88-a32d-4628-bd1f-36a562400373","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T18:35:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1676dd88-a32d-4628-bd1f-36a562400373","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d55e9459-a381-4989-b7f2-ca5621b8a075","keyName":"e2e-rate-a-a32c9d","selected_subscription":"e2e-rate-iso-a-a32c9d","selected_subscription_key":"ai-tenant-e2e-shared-a-2b5160/e2e-rate-iso-a-a32c9d@ai-tenant-e2e-shared-a-2b5160/rate-test-model-2b5160","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2b5160","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a32c9d","namespace":"ai-tenant-e2e-shared-a-2b5160","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T18:35:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1676dd88-a32d-4628-bd1f-36a562400373","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:35:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1676dd88-a32d-4628-bd1f-36a562400373","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:35:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"49922171-cc3c-4eb9-8483-6515765f647d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:33626","PortSpecifier":{"PortValue":33626}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"49922171-cc3c-4eb9-8483-6515765f647d","method":"POST","path":"/ai-tenant-e2e-shared-a-2b5160/rate-test-model-2b5160/v1/completions","host":"e2e-shared-a-2b5160.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:35:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"49922171-cc3c-4eb9-8483-6515765f647d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:33626","PortSpecifier":{"PortValue":33626}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783449325,"nanos":693874184},"http":{"id":"49922171-cc3c-4eb9-8483-6515765f647d","method":"POST","headers":{":authority":"e2e-shared-a-2b5160.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2b5160/rate-test-model-2b5160/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:35:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"49922171-cc3c-4eb9-8483-6515765f647d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-tUl3Kv9fJVO56538_1zXDZaOB8rs0lg7T2SXhTeOkR1io3h7nwZpzTQejfDK"}
{"level":"debug","ts":"2026-07-07T18:35:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"49922171-cc3c-4eb9-8483-6515765f647d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2b5160.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-tUl3Kv9fJVO56538_1zXDZaOB8rs0lg7T2SXhTeOkR1io3h7nwZpzTQejfDK\"}"}
{"level":"debug","ts":"2026-07-07T18:35:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"49922171-cc3c-4eb9-8483-6515765f647d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2b5160.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d55e9459-a381-4989-b7f2-ca5621b8a075","keyName":"e2e-rate-a-a32c9d","subscription":"e2e-rate-iso-a-a32c9d","tenant":"e2e-shared-a-2b5160","userId":"d55e9459-a381-4989-b7f2-ca5621b8a075","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T18:35:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"49922171-cc3c-4eb9-8483-6515765f647d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2b5160.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2b5160/rate-test-model-2b5160\",\"requestedSubscription\":\"e2e-rate-iso-a-a32c9d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T18:35:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"49922171-cc3c-4eb9-8483-6515765f647d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2b5160.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2b5160","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a32c9d","namespace":"ai-tenant-e2e-shared-a-2b5160","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T18:35:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"49922171-cc3c-4eb9-8483-6515765f647d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:35:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"49922171-cc3c-4eb9-8483-6515765f647d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:35:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"49922171-cc3c-4eb9-8483-6515765f647d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:35:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"49922171-cc3c-4eb9-8483-6515765f647d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2b5160/rate-test-model-2b5160\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:35:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"49922171-cc3c-4eb9-8483-6515765f647d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:35:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"49922171-cc3c-4eb9-8483-6515765f647d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T18:35:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"49922171-cc3c-4eb9-8483-6515765f647d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a32c9d"}
{"level":"debug","ts":"2026-07-07T18:35:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"49922171-cc3c-4eb9-8483-6515765f647d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T18:35:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"49922171-cc3c-4eb9-8483-6515765f647d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d55e9459-a381-4989-b7f2-ca5621b8a075","keyName":"e2e-rate-a-a32c9d","selected_subscription":"e2e-rate-iso-a-a32c9d","selected_subscription_key":"ai-tenant-e2e-shared-a-2b5160/e2e-rate-iso-a-a32c9d@ai-tenant-e2e-shared-a-2b5160/rate-test-model-2b5160","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2b5160","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a32c9d","namespace":"ai-tenant-e2e-shared-a-2b5160","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T18:35:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"49922171-cc3c-4eb9-8483-6515765f647d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:35:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"49922171-cc3c-4eb9-8483-6515765f647d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:35:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e44ce3fc-8ddd-451b-bc64-a26ffc90c61f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:51524","PortSpecifier":{"PortValue":51524}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e44ce3fc-8ddd-451b-bc64-a26ffc90c61f","method":"POST","path":"/ai-tenant-e2e-shared-b-200b05/rate-test-model-200b05/v1/completions","host":"e2e-shared-b-200b05.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:35:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e44ce3fc-8ddd-451b-bc64-a26ffc90c61f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:51524","PortSpecifier":{"PortValue":51524}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783449325,"nanos":731680637},"http":{"id":"e44ce3fc-8ddd-451b-bc64-a26ffc90c61f","method":"POST","headers":{":authority":"e2e-shared-b-200b05.apps.65d66aac-e59f-4b70-bf02-67bf82c58916.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-200b05/rate-test-model-200b05/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:35:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e44ce3fc-8ddd-451b-bc64-a26ffc90c61f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-13wtvTqgpO0Ma2lRP_3YpgeB9KS4eAC3NCdDwhoORu3ZsFCNarZQe8kccx4Qo"}
{"level":"debug","ts":"2026-07-07T18:35:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e44ce3fc-8ddd-451b-bc64-a26ffc90c61f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-200b05.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-13wtvTqgpO0Ma2lRP_3YpgeB9KS4eAC3NCdDwhoORu3ZsFCNarZQe8kccx4Qo\"}"}
{"level":"debug","ts":"2026-07-07T18:35:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e44ce3fc-8ddd-451b-bc64-a26ffc90c61f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-200b05.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"71d215b2-8130-4c0e-b0ab-9552b5c47c08","keyName":"e2e-rate-b-a32c9d","subscription":"e2e-rate-iso-b-a32c9d","tenant":"e2e-shared-b-200b05","userId":"71d215b2-8130-4c0e-b0ab-9552b5c47c08","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T18:35:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e44ce3fc-8ddd-451b-bc64-a26ffc90c61f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-200b05.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-200b05/rate-test-model-200b05\",\"requestedSubscription\":\"e2e-rate-iso-b-a32c9d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T18:35:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e44ce3fc-8ddd-451b-bc64-a26ffc90c61f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-200b05.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-200b05","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-a32c9d","namespace":"ai-tenant-e2e-shared-b-200b05","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T18:35:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e44ce3fc-8ddd-451b-bc64-a26ffc90c61f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:35:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e44ce3fc-8ddd-451b-bc64-a26ffc90c61f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:35:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e44ce3fc-8ddd-451b-bc64-a26ffc90c61f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:35:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e44ce3fc-8ddd-451b-bc64-a26ffc90c61f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:35:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e44ce3fc-8ddd-451b-bc64-a26ffc90c61f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-200b05/rate-test-model-200b05\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:35:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e44ce3fc-8ddd-451b-bc64-a26ffc90c61f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T18:35:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e44ce3fc-8ddd-451b-bc64-a26ffc90c61f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-a32c9d"}
{"level":"debug","ts":"2026-07-07T18:35:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e44ce3fc-8ddd-451b-bc64-a26ffc90c61f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T18:35:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e44ce3fc-8ddd-451b-bc64-a26ffc90c61f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"71d215b2-8130-4c0e-b0ab-9552b5c47c08","keyName":"e2e-rate-b-a32c9d","selected_subscription":"e2e-rate-iso-b-a32c9d","selected_subscription_key":"ai-tenant-e2e-shared-b-200b05/e2e-rate-iso-b-a32c9d@ai-tenant-e2e-shared-b-200b05/rate-test-model-200b05","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-200b05","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-a32c9d","namespace":"ai-tenant-e2e-shared-b-200b05","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T18:35:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e44ce3fc-8ddd-451b-bc64-a26ffc90c61f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:35:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e44ce3fc-8ddd-451b-bc64-a26ffc90c61f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:35:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5a166df2b33d22fd52a663fb21df71779fa3428e6bd942ef0368ed9c6eaac187"}
{"level":"info","ts":"2026-07-07T18:35:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/56ff444858977ec1fd96755721d2204ee169d7c45e06cd5e36a207565f978e9b"}
{"level":"info","ts":"2026-07-07T18:35:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/01d329525cf838f47dcdd3a03baf5c837ea2e54dcddb579896e08ae6e7c4caf4"}
{"level":"info","ts":"2026-07-07T18:35:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c38fd928142146dd0c2d7e0e81cbf54ac357f687349eebeac79c86d79255d123"}
{"level":"info","ts":"2026-07-07T18:35:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9f906acf030863e5d0ad4fbade71834e9cb7b0fb6a0872698781b3578e11230e"}
{"level":"info","ts":"2026-07-07T18:35:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/931ee8764973c652d4368fc774a1070cc059f325e76f2cab53b27a957c89066b"}
{"level":"info","ts":"2026-07-07T18:35:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a638544a7b4453c24e7e35deee0f8c4e811435fe0a55fcf19a4fdbc6e82e4db4"}
{"level":"info","ts":"2026-07-07T18:35:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c07c060b8ca340eab7d5648f64ca1514e12cb2a9378864fa15656f25abf9e9e9"}
{"level":"info","ts":"2026-07-07T18:35:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/858427b36ee01a2e80759bdcb9b4d6a8b3ad0b1fda11601c2572b61c61897f21"}
{"level":"info","ts":"2026-07-07T18:35:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/42ad3d8331ad1fb514e52d1bfb498313c17ab733831b2ae92324d00ab20cfdca"}
{"level":"info","ts":"2026-07-07T18:35:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a5433941fb23921b4779870e22474bd0483f3b87320f5ba029a131fe8e34f63e"}
{"level":"info","ts":"2026-07-07T18:35:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/673cdbad5df7b3cfa8aac6c2225841151a3f7946d95516619c62957be3589586"}
{"level":"info","ts":"2026-07-07T18:35:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1dee7f72bb8a71da5bd0897d824170e366f7f30ea843a61eb626d76e83f9d164"}
{"level":"info","ts":"2026-07-07T18:35:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4c2c24d1c96c830b77dc06f6523b0105969913c58cc2d046895e43470ccd8472"}
{"level":"info","ts":"2026-07-07T18:35:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/24d20cdc69688a666575d3ba2b477953d27cb35e84fd59ff807bb9750f61560d"}
{"level":"info","ts":"2026-07-07T18:35:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a30514bb9fb2e5c3795f74c9017e5be227d0157ac9a708eedbe5ebede08251f2"}
{"level":"info","ts":"2026-07-07T18:35:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/63b2f31ef20120e800f0ee145ba8327adcadec22d0e3c0959c989cffa944925b"}
{"level":"info","ts":"2026-07-07T18:35:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6c7d4e41ddb1bd416f2d5908a7bb8464816d48c020133e80633d04485d41709e"}
{"level":"info","ts":"2026-07-07T18:36:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a9c182abb05589fdaa6e7edcd0ea6244e050db80029590e554912f7cd441591f"}
{"level":"info","ts":"2026-07-07T18:36:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/341df337fdb6c76c4667771ef7ebc010ac902630d235c1f08796b3a0ae031283"}