--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"info","ts":"2026-07-13T18:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0fdf85bb61525190d99f5959b7ce0c8543431b4c50c3af18a485db02fd89185","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc56119fed2ef151402acb69c8b0d07efe80c796b5ff0c1c7fd270173dd35b53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:00:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:00:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc56119fed2ef151402acb69c8b0d07efe80c796b5ff0c1c7fd270173dd35b53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0fdf85bb61525190d99f5959b7ce0c8543431b4c50c3af18a485db02fd89185"}
{"level":"info","ts":"2026-07-13T18:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc56119fed2ef151402acb69c8b0d07efe80c796b5ff0c1c7fd270173dd35b53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0fdf85bb61525190d99f5959b7ce0c8543431b4c50c3af18a485db02fd89185","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc56119fed2ef151402acb69c8b0d07efe80c796b5ff0c1c7fd270173dd35b53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:00:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:00:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc56119fed2ef151402acb69c8b0d07efe80c796b5ff0c1c7fd270173dd35b53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc56119fed2ef151402acb69c8b0d07efe80c796b5ff0c1c7fd270173dd35b53","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc56119fed2ef151402acb69c8b0d07efe80c796b5ff0c1c7fd270173dd35b53"}
{"level":"debug","ts":"2026-07-13T18:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc56119fed2ef151402acb69c8b0d07efe80c796b5ff0c1c7fd270173dd35b53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:00:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:00:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc56119fed2ef151402acb69c8b0d07efe80c796b5ff0c1c7fd270173dd35b53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc56119fed2ef151402acb69c8b0d07efe80c796b5ff0c1c7fd270173dd35b53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc56119fed2ef151402acb69c8b0d07efe80c796b5ff0c1c7fd270173dd35b53","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0fdf85bb61525190d99f5959b7ce0c8543431b4c50c3af18a485db02fd89185"}
{"level":"info","ts":"2026-07-13T18:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc56119fed2ef151402acb69c8b0d07efe80c796b5ff0c1c7fd270173dd35b53"}
{"level":"debug","ts":"2026-07-13T18:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4340ff3ab9e877560840b8a5ff46511d598c74382087df97667792915e0ee22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:00:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:00:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4340ff3ab9e877560840b8a5ff46511d598c74382087df97667792915e0ee22","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4340ff3ab9e877560840b8a5ff46511d598c74382087df97667792915e0ee22","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4340ff3ab9e877560840b8a5ff46511d598c74382087df97667792915e0ee22"}
{"level":"debug","ts":"2026-07-13T18:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4340ff3ab9e877560840b8a5ff46511d598c74382087df97667792915e0ee22","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4340ff3ab9e877560840b8a5ff46511d598c74382087df97667792915e0ee22","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4340ff3ab9e877560840b8a5ff46511d598c74382087df97667792915e0ee22"}
{"level":"debug","ts":"2026-07-13T18:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4340ff3ab9e877560840b8a5ff46511d598c74382087df97667792915e0ee22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:00:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:00:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4340ff3ab9e877560840b8a5ff46511d598c74382087df97667792915e0ee22"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4340ff3ab9e877560840b8a5ff46511d598c74382087df97667792915e0ee22","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4340ff3ab9e877560840b8a5ff46511d598c74382087df97667792915e0ee22","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4340ff3ab9e877560840b8a5ff46511d598c74382087df97667792915e0ee22"}
{"level":"debug","ts":"2026-07-13T18:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"487cd1098f4e3710621cf8b9769c1b49637ec03e8fc944dec99ef4d72b388432","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:00:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:00:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"487cd1098f4e3710621cf8b9769c1b49637ec03e8fc944dec99ef4d72b388432","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"487cd1098f4e3710621cf8b9769c1b49637ec03e8fc944dec99ef4d72b388432","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/487cd1098f4e3710621cf8b9769c1b49637ec03e8fc944dec99ef4d72b388432"}
{"level":"debug","ts":"2026-07-13T18:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"487cd1098f4e3710621cf8b9769c1b49637ec03e8fc944dec99ef4d72b388432","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"487cd1098f4e3710621cf8b9769c1b49637ec03e8fc944dec99ef4d72b388432","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/487cd1098f4e3710621cf8b9769c1b49637ec03e8fc944dec99ef4d72b388432"}
{"level":"debug","ts":"2026-07-13T18:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"487cd1098f4e3710621cf8b9769c1b49637ec03e8fc944dec99ef4d72b388432","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:00:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:00:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["487cd1098f4e3710621cf8b9769c1b49637ec03e8fc944dec99ef4d72b388432"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"487cd1098f4e3710621cf8b9769c1b49637ec03e8fc944dec99ef4d72b388432","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"487cd1098f4e3710621cf8b9769c1b49637ec03e8fc944dec99ef4d72b388432","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/487cd1098f4e3710621cf8b9769c1b49637ec03e8fc944dec99ef4d72b388432"}
{"level":"info","ts":"2026-07-13T18:00:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/76eba93311ee0b8a716b48e1c39e415f17cb48380b32c1f912b4f57c1481ed92"}
{"level":"info","ts":"2026-07-13T18:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7591fad1961fdfc1eff82a35e58bfcb4e6e7b414f0a4803b001ad5c559b53173"}
{"level":"info","ts":"2026-07-13T18:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/08e5471ddddd3147fff9582213b61845cbc128a690b3238feda6d495d036a968"}
{"level":"info","ts":"2026-07-13T18:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8be15f913380b17679b361fbbe8bdbb4f111398d480aba5339b6117835bfabdf"}
{"level":"info","ts":"2026-07-13T18:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a4340ff3ab9e877560840b8a5ff46511d598c74382087df97667792915e0ee22"}
{"level":"info","ts":"2026-07-13T18:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a0fdf85bb61525190d99f5959b7ce0c8543431b4c50c3af18a485db02fd89185"}
{"level":"info","ts":"2026-07-13T18:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/487cd1098f4e3710621cf8b9769c1b49637ec03e8fc944dec99ef4d72b388432"}
{"level":"info","ts":"2026-07-13T18:00:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dc56119fed2ef151402acb69c8b0d07efe80c796b5ff0c1c7fd270173dd35b53"}
{"level":"debug","ts":"2026-07-13T18:02:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fdecc5af35a51bd40a5c27ae7e7c71301ff55d5fe6edd5ea55bf66a580b9751","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:02:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:02:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fdecc5af35a51bd40a5c27ae7e7c71301ff55d5fe6edd5ea55bf66a580b9751","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fdecc5af35a51bd40a5c27ae7e7c71301ff55d5fe6edd5ea55bf66a580b9751","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:02:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:02:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fdecc5af35a51bd40a5c27ae7e7c71301ff55d5fe6edd5ea55bf66a580b9751"}
{"level":"info","ts":"2026-07-13T18:02:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fdecc5af35a51bd40a5c27ae7e7c71301ff55d5fe6edd5ea55bf66a580b9751","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fdecc5af35a51bd40a5c27ae7e7c71301ff55d5fe6edd5ea55bf66a580b9751","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:02:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:02:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-13T18:02:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4fdecc5af35a51bd40a5c27ae7e7c71301ff55d5fe6edd5ea55bf66a580b9751","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4fdecc5af35a51bd40a5c27ae7e7c71301ff55d5fe6edd5ea55bf66a580b9751\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T18:02:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fdecc5af35a51bd40a5c27ae7e7c71301ff55d5fe6edd5ea55bf66a580b9751","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:02:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fdecc5af35a51bd40a5c27ae7e7c71301ff55d5fe6edd5ea55bf66a580b9751"}
{"level":"debug","ts":"2026-07-13T18:02:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fdecc5af35a51bd40a5c27ae7e7c71301ff55d5fe6edd5ea55bf66a580b9751","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:02:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fdecc5af35a51bd40a5c27ae7e7c71301ff55d5fe6edd5ea55bf66a580b9751"}
{"level":"debug","ts":"2026-07-13T18:02:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fdecc5af35a51bd40a5c27ae7e7c71301ff55d5fe6edd5ea55bf66a580b9751","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:02:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:02:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4fdecc5af35a51bd40a5c27ae7e7c71301ff55d5fe6edd5ea55bf66a580b9751"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fdecc5af35a51bd40a5c27ae7e7c71301ff55d5fe6edd5ea55bf66a580b9751","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fdecc5af35a51bd40a5c27ae7e7c71301ff55d5fe6edd5ea55bf66a580b9751","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:02:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:02:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fdecc5af35a51bd40a5c27ae7e7c71301ff55d5fe6edd5ea55bf66a580b9751","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fdecc5af35a51bd40a5c27ae7e7c71301ff55d5fe6edd5ea55bf66a580b9751","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fdecc5af35a51bd40a5c27ae7e7c71301ff55d5fe6edd5ea55bf66a580b9751"}
{"level":"debug","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fdecc5af35a51bd40a5c27ae7e7c71301ff55d5fe6edd5ea55bf66a580b9751","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fdecc5af35a51bd40a5c27ae7e7c71301ff55d5fe6edd5ea55bf66a580b9751","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fdecc5af35a51bd40a5c27ae7e7c71301ff55d5fe6edd5ea55bf66a580b9751"}
{"level":"debug","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fdecc5af35a51bd40a5c27ae7e7c71301ff55d5fe6edd5ea55bf66a580b9751","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:02:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:02:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4fdecc5af35a51bd40a5c27ae7e7c71301ff55d5fe6edd5ea55bf66a580b9751"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fdecc5af35a51bd40a5c27ae7e7c71301ff55d5fe6edd5ea55bf66a580b9751","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fdecc5af35a51bd40a5c27ae7e7c71301ff55d5fe6edd5ea55bf66a580b9751","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:02:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:02:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fdecc5af35a51bd40a5c27ae7e7c71301ff55d5fe6edd5ea55bf66a580b9751","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fdecc5af35a51bd40a5c27ae7e7c71301ff55d5fe6edd5ea55bf66a580b9751","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fdecc5af35a51bd40a5c27ae7e7c71301ff55d5fe6edd5ea55bf66a580b9751","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fdecc5af35a51bd40a5c27ae7e7c71301ff55d5fe6edd5ea55bf66a580b9751"}
{"level":"debug","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fdecc5af35a51bd40a5c27ae7e7c71301ff55d5fe6edd5ea55bf66a580b9751","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fdecc5af35a51bd40a5c27ae7e7c71301ff55d5fe6edd5ea55bf66a580b9751"}
{"level":"debug","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fdecc5af35a51bd40a5c27ae7e7c71301ff55d5fe6edd5ea55bf66a580b9751","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:02:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:02:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4fdecc5af35a51bd40a5c27ae7e7c71301ff55d5fe6edd5ea55bf66a580b9751"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fdecc5af35a51bd40a5c27ae7e7c71301ff55d5fe6edd5ea55bf66a580b9751","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fdecc5af35a51bd40a5c27ae7e7c71301ff55d5fe6edd5ea55bf66a580b9751","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:02:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:02:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fdecc5af35a51bd40a5c27ae7e7c71301ff55d5fe6edd5ea55bf66a580b9751","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fdecc5af35a51bd40a5c27ae7e7c71301ff55d5fe6edd5ea55bf66a580b9751","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fdecc5af35a51bd40a5c27ae7e7c71301ff55d5fe6edd5ea55bf66a580b9751","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fdecc5af35a51bd40a5c27ae7e7c71301ff55d5fe6edd5ea55bf66a580b9751"}
{"level":"debug","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fdecc5af35a51bd40a5c27ae7e7c71301ff55d5fe6edd5ea55bf66a580b9751","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fdecc5af35a51bd40a5c27ae7e7c71301ff55d5fe6edd5ea55bf66a580b9751"}
{"level":"debug","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fdecc5af35a51bd40a5c27ae7e7c71301ff55d5fe6edd5ea55bf66a580b9751","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:02:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:02:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4fdecc5af35a51bd40a5c27ae7e7c71301ff55d5fe6edd5ea55bf66a580b9751"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fdecc5af35a51bd40a5c27ae7e7c71301ff55d5fe6edd5ea55bf66a580b9751","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fdecc5af35a51bd40a5c27ae7e7c71301ff55d5fe6edd5ea55bf66a580b9751","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:02:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:02:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fdecc5af35a51bd40a5c27ae7e7c71301ff55d5fe6edd5ea55bf66a580b9751","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fdecc5af35a51bd40a5c27ae7e7c71301ff55d5fe6edd5ea55bf66a580b9751","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fdecc5af35a51bd40a5c27ae7e7c71301ff55d5fe6edd5ea55bf66a580b9751","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fdecc5af35a51bd40a5c27ae7e7c71301ff55d5fe6edd5ea55bf66a580b9751"}
{"level":"debug","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fdecc5af35a51bd40a5c27ae7e7c71301ff55d5fe6edd5ea55bf66a580b9751","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18c9542ee2b26f3820896d5e9c9c4977db155f073e88234488981ebb3534e4eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:02:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:02:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fdecc5af35a51bd40a5c27ae7e7c71301ff55d5fe6edd5ea55bf66a580b9751"}
{"level":"info","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18c9542ee2b26f3820896d5e9c9c4977db155f073e88234488981ebb3534e4eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18c9542ee2b26f3820896d5e9c9c4977db155f073e88234488981ebb3534e4eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:02:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:02:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18c9542ee2b26f3820896d5e9c9c4977db155f073e88234488981ebb3534e4eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18c9542ee2b26f3820896d5e9c9c4977db155f073e88234488981ebb3534e4eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:02:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:02:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18c9542ee2b26f3820896d5e9c9c4977db155f073e88234488981ebb3534e4eb"}
{"level":"error","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"18c9542ee2b26f3820896d5e9c9c4977db155f073e88234488981ebb3534e4eb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"18c9542ee2b26f3820896d5e9c9c4977db155f073e88234488981ebb3534e4eb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fdecc5af35a51bd40a5c27ae7e7c71301ff55d5fe6edd5ea55bf66a580b9751","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:02:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:02:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4fdecc5af35a51bd40a5c27ae7e7c71301ff55d5fe6edd5ea55bf66a580b9751"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fdecc5af35a51bd40a5c27ae7e7c71301ff55d5fe6edd5ea55bf66a580b9751","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18c9542ee2b26f3820896d5e9c9c4977db155f073e88234488981ebb3534e4eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fdecc5af35a51bd40a5c27ae7e7c71301ff55d5fe6edd5ea55bf66a580b9751","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18c9542ee2b26f3820896d5e9c9c4977db155f073e88234488981ebb3534e4eb"}
{"level":"debug","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18c9542ee2b26f3820896d5e9c9c4977db155f073e88234488981ebb3534e4eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:02:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:02:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18c9542ee2b26f3820896d5e9c9c4977db155f073e88234488981ebb3534e4eb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fdecc5af35a51bd40a5c27ae7e7c71301ff55d5fe6edd5ea55bf66a580b9751"}
{"level":"info","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18c9542ee2b26f3820896d5e9c9c4977db155f073e88234488981ebb3534e4eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18c9542ee2b26f3820896d5e9c9c4977db155f073e88234488981ebb3534e4eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:02:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:02:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18c9542ee2b26f3820896d5e9c9c4977db155f073e88234488981ebb3534e4eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18c9542ee2b26f3820896d5e9c9c4977db155f073e88234488981ebb3534e4eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18c9542ee2b26f3820896d5e9c9c4977db155f073e88234488981ebb3534e4eb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18c9542ee2b26f3820896d5e9c9c4977db155f073e88234488981ebb3534e4eb"}
{"level":"debug","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18c9542ee2b26f3820896d5e9c9c4977db155f073e88234488981ebb3534e4eb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18c9542ee2b26f3820896d5e9c9c4977db155f073e88234488981ebb3534e4eb"}
{"level":"debug","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a6339d21620610bfa04639f26a00e7fe569c929a38e1d32497951a4decc2288","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:02:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:02:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a6339d21620610bfa04639f26a00e7fe569c929a38e1d32497951a4decc2288","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18c9542ee2b26f3820896d5e9c9c4977db155f073e88234488981ebb3534e4eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:02:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:02:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18c9542ee2b26f3820896d5e9c9c4977db155f073e88234488981ebb3534e4eb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a6339d21620610bfa04639f26a00e7fe569c929a38e1d32497951a4decc2288"}
{"level":"info","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18c9542ee2b26f3820896d5e9c9c4977db155f073e88234488981ebb3534e4eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a6339d21620610bfa04639f26a00e7fe569c929a38e1d32497951a4decc2288","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18c9542ee2b26f3820896d5e9c9c4977db155f073e88234488981ebb3534e4eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a6339d21620610bfa04639f26a00e7fe569c929a38e1d32497951a4decc2288","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a6339d21620610bfa04639f26a00e7fe569c929a38e1d32497951a4decc2288"}
{"level":"debug","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a6339d21620610bfa04639f26a00e7fe569c929a38e1d32497951a4decc2288","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:02:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:02:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a6339d21620610bfa04639f26a00e7fe569c929a38e1d32497951a4decc2288"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a6339d21620610bfa04639f26a00e7fe569c929a38e1d32497951a4decc2288","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a6339d21620610bfa04639f26a00e7fe569c929a38e1d32497951a4decc2288","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18c9542ee2b26f3820896d5e9c9c4977db155f073e88234488981ebb3534e4eb"}
{"level":"debug","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db7f11d7eddbb541b33ea26c7e3bad0bf758275f3bbbf245bef49d18cf35d511","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:02:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:02:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a6339d21620610bfa04639f26a00e7fe569c929a38e1d32497951a4decc2288"}
{"level":"info","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db7f11d7eddbb541b33ea26c7e3bad0bf758275f3bbbf245bef49d18cf35d511","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db7f11d7eddbb541b33ea26c7e3bad0bf758275f3bbbf245bef49d18cf35d511","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:02:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:02:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db7f11d7eddbb541b33ea26c7e3bad0bf758275f3bbbf245bef49d18cf35d511","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db7f11d7eddbb541b33ea26c7e3bad0bf758275f3bbbf245bef49d18cf35d511","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:02:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:02:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"db7f11d7eddbb541b33ea26c7e3bad0bf758275f3bbbf245bef49d18cf35d511","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"db7f11d7eddbb541b33ea26c7e3bad0bf758275f3bbbf245bef49d18cf35d511\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db7f11d7eddbb541b33ea26c7e3bad0bf758275f3bbbf245bef49d18cf35d511","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db7f11d7eddbb541b33ea26c7e3bad0bf758275f3bbbf245bef49d18cf35d511","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db7f11d7eddbb541b33ea26c7e3bad0bf758275f3bbbf245bef49d18cf35d511"}
{"level":"info","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db7f11d7eddbb541b33ea26c7e3bad0bf758275f3bbbf245bef49d18cf35d511"}
{"level":"debug","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e587982a2e7d56d247ef74c417ee8c18543f66d34510c2bc4fbe87d50be70a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:02:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:02:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e587982a2e7d56d247ef74c417ee8c18543f66d34510c2bc4fbe87d50be70a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e587982a2e7d56d247ef74c417ee8c18543f66d34510c2bc4fbe87d50be70a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e587982a2e7d56d247ef74c417ee8c18543f66d34510c2bc4fbe87d50be70a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db7f11d7eddbb541b33ea26c7e3bad0bf758275f3bbbf245bef49d18cf35d511","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:02:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:02:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db7f11d7eddbb541b33ea26c7e3bad0bf758275f3bbbf245bef49d18cf35d511"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e587982a2e7d56d247ef74c417ee8c18543f66d34510c2bc4fbe87d50be70a1"}
{"level":"info","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db7f11d7eddbb541b33ea26c7e3bad0bf758275f3bbbf245bef49d18cf35d511","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db7f11d7eddbb541b33ea26c7e3bad0bf758275f3bbbf245bef49d18cf35d511","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e587982a2e7d56d247ef74c417ee8c18543f66d34510c2bc4fbe87d50be70a1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e587982a2e7d56d247ef74c417ee8c18543f66d34510c2bc4fbe87d50be70a1"}
{"level":"debug","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e587982a2e7d56d247ef74c417ee8c18543f66d34510c2bc4fbe87d50be70a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:02:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:02:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e587982a2e7d56d247ef74c417ee8c18543f66d34510c2bc4fbe87d50be70a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db7f11d7eddbb541b33ea26c7e3bad0bf758275f3bbbf245bef49d18cf35d511"}
{"level":"info","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e587982a2e7d56d247ef74c417ee8c18543f66d34510c2bc4fbe87d50be70a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b69f430585271dc575479bf251a09ed0a3992c7640d18f0c475e07388151623b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:02:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:02:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b69f430585271dc575479bf251a09ed0a3992c7640d18f0c475e07388151623b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e587982a2e7d56d247ef74c417ee8c18543f66d34510c2bc4fbe87d50be70a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e76dd23f16d22b614f25c37311f7b0734cae93acc32f29fda9f2cbb10ab9c298","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:02:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:02:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e76dd23f16d22b614f25c37311f7b0734cae93acc32f29fda9f2cbb10ab9c298","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b69f430585271dc575479bf251a09ed0a3992c7640d18f0c475e07388151623b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e76dd23f16d22b614f25c37311f7b0734cae93acc32f29fda9f2cbb10ab9c298","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b69f430585271dc575479bf251a09ed0a3992c7640d18f0c475e07388151623b"}
{"level":"debug","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e76dd23f16d22b614f25c37311f7b0734cae93acc32f29fda9f2cbb10ab9c298","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b69f430585271dc575479bf251a09ed0a3992c7640d18f0c475e07388151623b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:02:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:02:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b69f430585271dc575479bf251a09ed0a3992c7640d18f0c475e07388151623b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b69f430585271dc575479bf251a09ed0a3992c7640d18f0c475e07388151623b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e76dd23f16d22b614f25c37311f7b0734cae93acc32f29fda9f2cbb10ab9c298","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b69f430585271dc575479bf251a09ed0a3992c7640d18f0c475e07388151623b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e587982a2e7d56d247ef74c417ee8c18543f66d34510c2bc4fbe87d50be70a1"}
{"level":"info","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e76dd23f16d22b614f25c37311f7b0734cae93acc32f29fda9f2cbb10ab9c298"}
{"level":"debug","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e76dd23f16d22b614f25c37311f7b0734cae93acc32f29fda9f2cbb10ab9c298","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:02:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:02:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e76dd23f16d22b614f25c37311f7b0734cae93acc32f29fda9f2cbb10ab9c298"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e76dd23f16d22b614f25c37311f7b0734cae93acc32f29fda9f2cbb10ab9c298","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20953488b99c0985461b29fbfc70ac90e6be7568a1ad42d4fbd38e76b839c164","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:02:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:02:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b69f430585271dc575479bf251a09ed0a3992c7640d18f0c475e07388151623b"}
{"level":"info","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20953488b99c0985461b29fbfc70ac90e6be7568a1ad42d4fbd38e76b839c164","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e76dd23f16d22b614f25c37311f7b0734cae93acc32f29fda9f2cbb10ab9c298","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"184ae4c2d40e05f9404542a6751a99cad580ff20b848781f0370c58c08e6917c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:02:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:02:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"184ae4c2d40e05f9404542a6751a99cad580ff20b848781f0370c58c08e6917c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20953488b99c0985461b29fbfc70ac90e6be7568a1ad42d4fbd38e76b839c164","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:02:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:02:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20953488b99c0985461b29fbfc70ac90e6be7568a1ad42d4fbd38e76b839c164","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"184ae4c2d40e05f9404542a6751a99cad580ff20b848781f0370c58c08e6917c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20953488b99c0985461b29fbfc70ac90e6be7568a1ad42d4fbd38e76b839c164","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:02:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20953488b99c0985461b29fbfc70ac90e6be7568a1ad42d4fbd38e76b839c164"}
{"level":"debug","ts":"2026-07-13T18:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20953488b99c0985461b29fbfc70ac90e6be7568a1ad42d4fbd38e76b839c164","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:02:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:02:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["20953488b99c0985461b29fbfc70ac90e6be7568a1ad42d4fbd38e76b839c164"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20953488b99c0985461b29fbfc70ac90e6be7568a1ad42d4fbd38e76b839c164","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"184ae4c2d40e05f9404542a6751a99cad580ff20b848781f0370c58c08e6917c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20953488b99c0985461b29fbfc70ac90e6be7568a1ad42d4fbd38e76b839c164","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"184ae4c2d40e05f9404542a6751a99cad580ff20b848781f0370c58c08e6917c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34f2a54846c06f19022727f634be5c948928a1e098a29d4e9e81087e78cad116","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:02:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:02:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e76dd23f16d22b614f25c37311f7b0734cae93acc32f29fda9f2cbb10ab9c298"}
{"level":"info","ts":"2026-07-13T18:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34f2a54846c06f19022727f634be5c948928a1e098a29d4e9e81087e78cad116","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4e030a9a5b56395d03b3f1f38404eca9054dfc1cbbe3cbd3068651a082ba36a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:02:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:02:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/184ae4c2d40e05f9404542a6751a99cad580ff20b848781f0370c58c08e6917c"}
{"level":"info","ts":"2026-07-13T18:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4e030a9a5b56395d03b3f1f38404eca9054dfc1cbbe3cbd3068651a082ba36a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34f2a54846c06f19022727f634be5c948928a1e098a29d4e9e81087e78cad116","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"208855e9b86067955f9a6fef2aba575418879330c21dd43a4eb33793fa0fde47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:02:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:02:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"208855e9b86067955f9a6fef2aba575418879330c21dd43a4eb33793fa0fde47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4e030a9a5b56395d03b3f1f38404eca9054dfc1cbbe3cbd3068651a082ba36a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"184ae4c2d40e05f9404542a6751a99cad580ff20b848781f0370c58c08e6917c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:02:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:02:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["184ae4c2d40e05f9404542a6751a99cad580ff20b848781f0370c58c08e6917c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20953488b99c0985461b29fbfc70ac90e6be7568a1ad42d4fbd38e76b839c164"}
{"level":"info","ts":"2026-07-13T18:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"184ae4c2d40e05f9404542a6751a99cad580ff20b848781f0370c58c08e6917c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34f2a54846c06f19022727f634be5c948928a1e098a29d4e9e81087e78cad116","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:02:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:02:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34f2a54846c06f19022727f634be5c948928a1e098a29d4e9e81087e78cad116"}
{"level":"info","ts":"2026-07-13T18:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34f2a54846c06f19022727f634be5c948928a1e098a29d4e9e81087e78cad116","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"208855e9b86067955f9a6fef2aba575418879330c21dd43a4eb33793fa0fde47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4e030a9a5b56395d03b3f1f38404eca9054dfc1cbbe3cbd3068651a082ba36a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:02:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:02:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4e030a9a5b56395d03b3f1f38404eca9054dfc1cbbe3cbd3068651a082ba36a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"184ae4c2d40e05f9404542a6751a99cad580ff20b848781f0370c58c08e6917c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34f2a54846c06f19022727f634be5c948928a1e098a29d4e9e81087e78cad116","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:02:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:02:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34f2a54846c06f19022727f634be5c948928a1e098a29d4e9e81087e78cad116"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4e030a9a5b56395d03b3f1f38404eca9054dfc1cbbe3cbd3068651a082ba36a"}
{"level":"info","ts":"2026-07-13T18:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34f2a54846c06f19022727f634be5c948928a1e098a29d4e9e81087e78cad116","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"208855e9b86067955f9a6fef2aba575418879330c21dd43a4eb33793fa0fde47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:02:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:02:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/208855e9b86067955f9a6fef2aba575418879330c21dd43a4eb33793fa0fde47"}
{"level":"info","ts":"2026-07-13T18:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"208855e9b86067955f9a6fef2aba575418879330c21dd43a4eb33793fa0fde47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4e030a9a5b56395d03b3f1f38404eca9054dfc1cbbe3cbd3068651a082ba36a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:02:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:02:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4e030a9a5b56395d03b3f1f38404eca9054dfc1cbbe3cbd3068651a082ba36a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4e030a9a5b56395d03b3f1f38404eca9054dfc1cbbe3cbd3068651a082ba36a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34f2a54846c06f19022727f634be5c948928a1e098a29d4e9e81087e78cad116","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"208855e9b86067955f9a6fef2aba575418879330c21dd43a4eb33793fa0fde47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:02:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:02:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["208855e9b86067955f9a6fef2aba575418879330c21dd43a4eb33793fa0fde47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/184ae4c2d40e05f9404542a6751a99cad580ff20b848781f0370c58c08e6917c"}
{"level":"info","ts":"2026-07-13T18:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"208855e9b86067955f9a6fef2aba575418879330c21dd43a4eb33793fa0fde47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4e030a9a5b56395d03b3f1f38404eca9054dfc1cbbe3cbd3068651a082ba36a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"208855e9b86067955f9a6fef2aba575418879330c21dd43a4eb33793fa0fde47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:02:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:02:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["208855e9b86067955f9a6fef2aba575418879330c21dd43a4eb33793fa0fde47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34f2a54846c06f19022727f634be5c948928a1e098a29d4e9e81087e78cad116"}
{"level":"error","ts":"2026-07-13T18:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"208855e9b86067955f9a6fef2aba575418879330c21dd43a4eb33793fa0fde47","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"208855e9b86067955f9a6fef2aba575418879330c21dd43a4eb33793fa0fde47\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T18:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"208855e9b86067955f9a6fef2aba575418879330c21dd43a4eb33793fa0fde47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"208855e9b86067955f9a6fef2aba575418879330c21dd43a4eb33793fa0fde47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4e030a9a5b56395d03b3f1f38404eca9054dfc1cbbe3cbd3068651a082ba36a"}
{"level":"info","ts":"2026-07-13T18:02:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/208855e9b86067955f9a6fef2aba575418879330c21dd43a4eb33793fa0fde47"}
{"level":"debug","ts":"2026-07-13T18:02:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cd07051e0dfb3438bdaf681614ed4d21e02b79eb10ef7f8df748d0861d7f866","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:02:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:02:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cd07051e0dfb3438bdaf681614ed4d21e02b79eb10ef7f8df748d0861d7f866"}
{"level":"info","ts":"2026-07-13T18:02:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cd07051e0dfb3438bdaf681614ed4d21e02b79eb10ef7f8df748d0861d7f866","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cd07051e0dfb3438bdaf681614ed4d21e02b79eb10ef7f8df748d0861d7f866","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cd07051e0dfb3438bdaf681614ed4d21e02b79eb10ef7f8df748d0861d7f866","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:02:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cd07051e0dfb3438bdaf681614ed4d21e02b79eb10ef7f8df748d0861d7f866"}
{"level":"debug","ts":"2026-07-13T18:02:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cd07051e0dfb3438bdaf681614ed4d21e02b79eb10ef7f8df748d0861d7f866","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:02:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:02:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8cd07051e0dfb3438bdaf681614ed4d21e02b79eb10ef7f8df748d0861d7f866"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cd07051e0dfb3438bdaf681614ed4d21e02b79eb10ef7f8df748d0861d7f866","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cd07051e0dfb3438bdaf681614ed4d21e02b79eb10ef7f8df748d0861d7f866","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:02:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cd07051e0dfb3438bdaf681614ed4d21e02b79eb10ef7f8df748d0861d7f866"}
{"level":"debug","ts":"2026-07-13T18:02:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79d49edac2db1014f3090d51a543777010688b14851a37bf084ddd5299b75413","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:02:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:02:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79d49edac2db1014f3090d51a543777010688b14851a37bf084ddd5299b75413"}
{"level":"info","ts":"2026-07-13T18:02:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79d49edac2db1014f3090d51a543777010688b14851a37bf084ddd5299b75413","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79d49edac2db1014f3090d51a543777010688b14851a37bf084ddd5299b75413","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79d49edac2db1014f3090d51a543777010688b14851a37bf084ddd5299b75413","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:02:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79d49edac2db1014f3090d51a543777010688b14851a37bf084ddd5299b75413"}
{"level":"debug","ts":"2026-07-13T18:02:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79d49edac2db1014f3090d51a543777010688b14851a37bf084ddd5299b75413","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:02:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:02:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79d49edac2db1014f3090d51a543777010688b14851a37bf084ddd5299b75413"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79d49edac2db1014f3090d51a543777010688b14851a37bf084ddd5299b75413","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79d49edac2db1014f3090d51a543777010688b14851a37bf084ddd5299b75413","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:02:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79d49edac2db1014f3090d51a543777010688b14851a37bf084ddd5299b75413"}
{"level":"debug","ts":"2026-07-13T18:02:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29c311638e870490e73e4e5178735dd6a56184297cdc441b428310c183c9dc3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:02:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:02:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29c311638e870490e73e4e5178735dd6a56184297cdc441b428310c183c9dc3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29c311638e870490e73e4e5178735dd6a56184297cdc441b428310c183c9dc3c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:02:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29c311638e870490e73e4e5178735dd6a56184297cdc441b428310c183c9dc3c"}
{"level":"debug","ts":"2026-07-13T18:02:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29c311638e870490e73e4e5178735dd6a56184297cdc441b428310c183c9dc3c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:02:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29c311638e870490e73e4e5178735dd6a56184297cdc441b428310c183c9dc3c"}
{"level":"debug","ts":"2026-07-13T18:02:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29c311638e870490e73e4e5178735dd6a56184297cdc441b428310c183c9dc3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:02:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:02:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29c311638e870490e73e4e5178735dd6a56184297cdc441b428310c183c9dc3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29c311638e870490e73e4e5178735dd6a56184297cdc441b428310c183c9dc3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29c311638e870490e73e4e5178735dd6a56184297cdc441b428310c183c9dc3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:02:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:02:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29c311638e870490e73e4e5178735dd6a56184297cdc441b428310c183c9dc3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29c311638e870490e73e4e5178735dd6a56184297cdc441b428310c183c9dc3c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:02:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29c311638e870490e73e4e5178735dd6a56184297cdc441b428310c183c9dc3c"}
{"level":"debug","ts":"2026-07-13T18:02:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29c311638e870490e73e4e5178735dd6a56184297cdc441b428310c183c9dc3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29c311638e870490e73e4e5178735dd6a56184297cdc441b428310c183c9dc3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb468b6eeda307f4cf04d62ddc3e92bffac6d092642e1f1fc8601045c17fd6de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:02:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:02:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29c311638e870490e73e4e5178735dd6a56184297cdc441b428310c183c9dc3c"}
{"level":"info","ts":"2026-07-13T18:02:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb468b6eeda307f4cf04d62ddc3e92bffac6d092642e1f1fc8601045c17fd6de"}
{"level":"info","ts":"2026-07-13T18:02:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb468b6eeda307f4cf04d62ddc3e92bffac6d092642e1f1fc8601045c17fd6de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb468b6eeda307f4cf04d62ddc3e92bffac6d092642e1f1fc8601045c17fd6de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:02:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:02:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb468b6eeda307f4cf04d62ddc3e92bffac6d092642e1f1fc8601045c17fd6de"}
{"level":"info","ts":"2026-07-13T18:02:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb468b6eeda307f4cf04d62ddc3e92bffac6d092642e1f1fc8601045c17fd6de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29c311638e870490e73e4e5178735dd6a56184297cdc441b428310c183c9dc3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:02:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:02:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29c311638e870490e73e4e5178735dd6a56184297cdc441b428310c183c9dc3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29c311638e870490e73e4e5178735dd6a56184297cdc441b428310c183c9dc3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb468b6eeda307f4cf04d62ddc3e92bffac6d092642e1f1fc8601045c17fd6de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29c311638e870490e73e4e5178735dd6a56184297cdc441b428310c183c9dc3c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:02:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb468b6eeda307f4cf04d62ddc3e92bffac6d092642e1f1fc8601045c17fd6de"}
{"level":"debug","ts":"2026-07-13T18:02:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb468b6eeda307f4cf04d62ddc3e92bffac6d092642e1f1fc8601045c17fd6de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:02:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:02:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb468b6eeda307f4cf04d62ddc3e92bffac6d092642e1f1fc8601045c17fd6de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29c311638e870490e73e4e5178735dd6a56184297cdc441b428310c183c9dc3c"}
{"level":"info","ts":"2026-07-13T18:02:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb468b6eeda307f4cf04d62ddc3e92bffac6d092642e1f1fc8601045c17fd6de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb468b6eeda307f4cf04d62ddc3e92bffac6d092642e1f1fc8601045c17fd6de","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:02:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb468b6eeda307f4cf04d62ddc3e92bffac6d092642e1f1fc8601045c17fd6de"}
{"level":"debug","ts":"2026-07-13T18:02:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc928132af03242d4c18c6705952c307130e43eb5c364a2658b52a4e5fce94a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:02:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:02:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc928132af03242d4c18c6705952c307130e43eb5c364a2658b52a4e5fce94a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc928132af03242d4c18c6705952c307130e43eb5c364a2658b52a4e5fce94a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:02:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:02:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc928132af03242d4c18c6705952c307130e43eb5c364a2658b52a4e5fce94a7"}
{"level":"info","ts":"2026-07-13T18:02:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc928132af03242d4c18c6705952c307130e43eb5c364a2658b52a4e5fce94a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc928132af03242d4c18c6705952c307130e43eb5c364a2658b52a4e5fce94a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:02:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:02:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-13T18:02:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cc928132af03242d4c18c6705952c307130e43eb5c364a2658b52a4e5fce94a7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cc928132af03242d4c18c6705952c307130e43eb5c364a2658b52a4e5fce94a7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T18:02:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc928132af03242d4c18c6705952c307130e43eb5c364a2658b52a4e5fce94a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc928132af03242d4c18c6705952c307130e43eb5c364a2658b52a4e5fce94a7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:02:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc928132af03242d4c18c6705952c307130e43eb5c364a2658b52a4e5fce94a7"}
{"level":"info","ts":"2026-07-13T18:02:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc928132af03242d4c18c6705952c307130e43eb5c364a2658b52a4e5fce94a7"}
{"level":"debug","ts":"2026-07-13T18:02:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc928132af03242d4c18c6705952c307130e43eb5c364a2658b52a4e5fce94a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:02:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:02:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc928132af03242d4c18c6705952c307130e43eb5c364a2658b52a4e5fce94a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc928132af03242d4c18c6705952c307130e43eb5c364a2658b52a4e5fce94a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc928132af03242d4c18c6705952c307130e43eb5c364a2658b52a4e5fce94a7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc928132af03242d4c18c6705952c307130e43eb5c364a2658b52a4e5fce94a7"}
{"level":"debug","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a2965aef3b7c2070a147b46e8814f5e0947cdbd04f47e55191ef4931e36aa19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:02:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:02:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a2965aef3b7c2070a147b46e8814f5e0947cdbd04f47e55191ef4931e36aa19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a2965aef3b7c2070a147b46e8814f5e0947cdbd04f47e55191ef4931e36aa19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:02:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:02:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a2965aef3b7c2070a147b46e8814f5e0947cdbd04f47e55191ef4931e36aa19"}
{"level":"info","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a2965aef3b7c2070a147b46e8814f5e0947cdbd04f47e55191ef4931e36aa19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a2965aef3b7c2070a147b46e8814f5e0947cdbd04f47e55191ef4931e36aa19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:02:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:02:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7a2965aef3b7c2070a147b46e8814f5e0947cdbd04f47e55191ef4931e36aa19","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7a2965aef3b7c2070a147b46e8814f5e0947cdbd04f47e55191ef4931e36aa19\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a2965aef3b7c2070a147b46e8814f5e0947cdbd04f47e55191ef4931e36aa19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a2965aef3b7c2070a147b46e8814f5e0947cdbd04f47e55191ef4931e36aa19","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a2965aef3b7c2070a147b46e8814f5e0947cdbd04f47e55191ef4931e36aa19"}
{"level":"info","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a2965aef3b7c2070a147b46e8814f5e0947cdbd04f47e55191ef4931e36aa19"}
{"level":"debug","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06c6f16b98a4bb1db29ad04b2b1190b2d566d5637f0c9a8175c8d88d974ce85c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:02:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:02:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06c6f16b98a4bb1db29ad04b2b1190b2d566d5637f0c9a8175c8d88d974ce85c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06c6f16b98a4bb1db29ad04b2b1190b2d566d5637f0c9a8175c8d88d974ce85c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:02:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:02:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06c6f16b98a4bb1db29ad04b2b1190b2d566d5637f0c9a8175c8d88d974ce85c"}
{"level":"info","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06c6f16b98a4bb1db29ad04b2b1190b2d566d5637f0c9a8175c8d88d974ce85c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a2965aef3b7c2070a147b46e8814f5e0947cdbd04f47e55191ef4931e36aa19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:02:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:02:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a2965aef3b7c2070a147b46e8814f5e0947cdbd04f47e55191ef4931e36aa19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a2965aef3b7c2070a147b46e8814f5e0947cdbd04f47e55191ef4931e36aa19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06c6f16b98a4bb1db29ad04b2b1190b2d566d5637f0c9a8175c8d88d974ce85c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a2965aef3b7c2070a147b46e8814f5e0947cdbd04f47e55191ef4931e36aa19","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06c6f16b98a4bb1db29ad04b2b1190b2d566d5637f0c9a8175c8d88d974ce85c"}
{"level":"debug","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06c6f16b98a4bb1db29ad04b2b1190b2d566d5637f0c9a8175c8d88d974ce85c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:02:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:02:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["06c6f16b98a4bb1db29ad04b2b1190b2d566d5637f0c9a8175c8d88d974ce85c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06c6f16b98a4bb1db29ad04b2b1190b2d566d5637f0c9a8175c8d88d974ce85c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06c6f16b98a4bb1db29ad04b2b1190b2d566d5637f0c9a8175c8d88d974ce85c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a2965aef3b7c2070a147b46e8814f5e0947cdbd04f47e55191ef4931e36aa19"}
{"level":"info","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06c6f16b98a4bb1db29ad04b2b1190b2d566d5637f0c9a8175c8d88d974ce85c"}
{"level":"debug","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45f892f01b42aad235c3dd6e84a80f1a3a4556371f0b4a7a35261469a0c87bbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:02:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:02:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45f892f01b42aad235c3dd6e84a80f1a3a4556371f0b4a7a35261469a0c87bbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45f892f01b42aad235c3dd6e84a80f1a3a4556371f0b4a7a35261469a0c87bbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:02:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:02:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45f892f01b42aad235c3dd6e84a80f1a3a4556371f0b4a7a35261469a0c87bbb"}
{"level":"info","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45f892f01b42aad235c3dd6e84a80f1a3a4556371f0b4a7a35261469a0c87bbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45f892f01b42aad235c3dd6e84a80f1a3a4556371f0b4a7a35261469a0c87bbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:02:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:02:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"45f892f01b42aad235c3dd6e84a80f1a3a4556371f0b4a7a35261469a0c87bbb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"45f892f01b42aad235c3dd6e84a80f1a3a4556371f0b4a7a35261469a0c87bbb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45f892f01b42aad235c3dd6e84a80f1a3a4556371f0b4a7a35261469a0c87bbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45f892f01b42aad235c3dd6e84a80f1a3a4556371f0b4a7a35261469a0c87bbb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45f892f01b42aad235c3dd6e84a80f1a3a4556371f0b4a7a35261469a0c87bbb"}
{"level":"info","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45f892f01b42aad235c3dd6e84a80f1a3a4556371f0b4a7a35261469a0c87bbb"}
{"level":"debug","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96852efc678de4fd3ecac40f3cab7bd3d843cffb6adfb831aabbe6c9bd9b31db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:02:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:02:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96852efc678de4fd3ecac40f3cab7bd3d843cffb6adfb831aabbe6c9bd9b31db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e2a68523f613aa9b763d72d99ea604c7bf08c487fdf36d7058aea91392567fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:02:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:02:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96852efc678de4fd3ecac40f3cab7bd3d843cffb6adfb831aabbe6c9bd9b31db"}
{"level":"info","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e2a68523f613aa9b763d72d99ea604c7bf08c487fdf36d7058aea91392567fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96852efc678de4fd3ecac40f3cab7bd3d843cffb6adfb831aabbe6c9bd9b31db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:02:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:02:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["96852efc678de4fd3ecac40f3cab7bd3d843cffb6adfb831aabbe6c9bd9b31db"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e2a68523f613aa9b763d72d99ea604c7bf08c487fdf36d7058aea91392567fd"}
{"level":"info","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96852efc678de4fd3ecac40f3cab7bd3d843cffb6adfb831aabbe6c9bd9b31db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45f892f01b42aad235c3dd6e84a80f1a3a4556371f0b4a7a35261469a0c87bbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:02:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:02:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["45f892f01b42aad235c3dd6e84a80f1a3a4556371f0b4a7a35261469a0c87bbb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45f892f01b42aad235c3dd6e84a80f1a3a4556371f0b4a7a35261469a0c87bbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e2a68523f613aa9b763d72d99ea604c7bf08c487fdf36d7058aea91392567fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:02:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:02:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e2a68523f613aa9b763d72d99ea604c7bf08c487fdf36d7058aea91392567fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96852efc678de4fd3ecac40f3cab7bd3d843cffb6adfb831aabbe6c9bd9b31db"}
{"level":"info","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e2a68523f613aa9b763d72d99ea604c7bf08c487fdf36d7058aea91392567fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96852efc678de4fd3ecac40f3cab7bd3d843cffb6adfb831aabbe6c9bd9b31db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45f892f01b42aad235c3dd6e84a80f1a3a4556371f0b4a7a35261469a0c87bbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e2a68523f613aa9b763d72d99ea604c7bf08c487fdf36d7058aea91392567fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:02:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:02:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e2a68523f613aa9b763d72d99ea604c7bf08c487fdf36d7058aea91392567fd"}
{"level":"info","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e2a68523f613aa9b763d72d99ea604c7bf08c487fdf36d7058aea91392567fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e2a68523f613aa9b763d72d99ea604c7bf08c487fdf36d7058aea91392567fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:02:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:02:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e2a68523f613aa9b763d72d99ea604c7bf08c487fdf36d7058aea91392567fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e2a68523f613aa9b763d72d99ea604c7bf08c487fdf36d7058aea91392567fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1b848081b5fe150ffa06e6c5b3f8f664040fdfa8163021bb69adef2911292c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:02:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:02:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45f892f01b42aad235c3dd6e84a80f1a3a4556371f0b4a7a35261469a0c87bbb"}
{"level":"info","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1b848081b5fe150ffa06e6c5b3f8f664040fdfa8163021bb69adef2911292c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e2a68523f613aa9b763d72d99ea604c7bf08c487fdf36d7058aea91392567fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1b848081b5fe150ffa06e6c5b3f8f664040fdfa8163021bb69adef2911292c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1b848081b5fe150ffa06e6c5b3f8f664040fdfa8163021bb69adef2911292c2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96852efc678de4fd3ecac40f3cab7bd3d843cffb6adfb831aabbe6c9bd9b31db"}
{"level":"debug","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1b848081b5fe150ffa06e6c5b3f8f664040fdfa8163021bb69adef2911292c2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e2a68523f613aa9b763d72d99ea604c7bf08c487fdf36d7058aea91392567fd"}
{"level":"info","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1b848081b5fe150ffa06e6c5b3f8f664040fdfa8163021bb69adef2911292c2"}
{"level":"debug","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1b848081b5fe150ffa06e6c5b3f8f664040fdfa8163021bb69adef2911292c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:02:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:02:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1b848081b5fe150ffa06e6c5b3f8f664040fdfa8163021bb69adef2911292c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1b848081b5fe150ffa06e6c5b3f8f664040fdfa8163021bb69adef2911292c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6861f89e61443c5edae016a118f2263a5a37e31a0abc0acf0986a9e6188f9e54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:02:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:02:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6861f89e61443c5edae016a118f2263a5a37e31a0abc0acf0986a9e6188f9e54"}
{"level":"info","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6861f89e61443c5edae016a118f2263a5a37e31a0abc0acf0986a9e6188f9e54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1b848081b5fe150ffa06e6c5b3f8f664040fdfa8163021bb69adef2911292c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:02:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:02:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1b848081b5fe150ffa06e6c5b3f8f664040fdfa8163021bb69adef2911292c2"}
{"level":"info","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6861f89e61443c5edae016a118f2263a5a37e31a0abc0acf0986a9e6188f9e54"}
{"level":"info","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1b848081b5fe150ffa06e6c5b3f8f664040fdfa8163021bb69adef2911292c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6861f89e61443c5edae016a118f2263a5a37e31a0abc0acf0986a9e6188f9e54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:02:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:02:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6861f89e61443c5edae016a118f2263a5a37e31a0abc0acf0986a9e6188f9e54"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1b848081b5fe150ffa06e6c5b3f8f664040fdfa8163021bb69adef2911292c2"}
{"level":"info","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6861f89e61443c5edae016a118f2263a5a37e31a0abc0acf0986a9e6188f9e54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1b848081b5fe150ffa06e6c5b3f8f664040fdfa8163021bb69adef2911292c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:02:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:02:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1b848081b5fe150ffa06e6c5b3f8f664040fdfa8163021bb69adef2911292c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6861f89e61443c5edae016a118f2263a5a37e31a0abc0acf0986a9e6188f9e54"}
{"level":"info","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1b848081b5fe150ffa06e6c5b3f8f664040fdfa8163021bb69adef2911292c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6861f89e61443c5edae016a118f2263a5a37e31a0abc0acf0986a9e6188f9e54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1b848081b5fe150ffa06e6c5b3f8f664040fdfa8163021bb69adef2911292c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:02:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:02:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1b848081b5fe150ffa06e6c5b3f8f664040fdfa8163021bb69adef2911292c2"}
{"level":"info","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1b848081b5fe150ffa06e6c5b3f8f664040fdfa8163021bb69adef2911292c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1b848081b5fe150ffa06e6c5b3f8f664040fdfa8163021bb69adef2911292c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1b848081b5fe150ffa06e6c5b3f8f664040fdfa8163021bb69adef2911292c2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1b848081b5fe150ffa06e6c5b3f8f664040fdfa8163021bb69adef2911292c2"}
{"level":"debug","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1b848081b5fe150ffa06e6c5b3f8f664040fdfa8163021bb69adef2911292c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:02:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:02:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1b848081b5fe150ffa06e6c5b3f8f664040fdfa8163021bb69adef2911292c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1b848081b5fe150ffa06e6c5b3f8f664040fdfa8163021bb69adef2911292c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1b848081b5fe150ffa06e6c5b3f8f664040fdfa8163021bb69adef2911292c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:02:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:02:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1b848081b5fe150ffa06e6c5b3f8f664040fdfa8163021bb69adef2911292c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1b848081b5fe150ffa06e6c5b3f8f664040fdfa8163021bb69adef2911292c2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1b848081b5fe150ffa06e6c5b3f8f664040fdfa8163021bb69adef2911292c2"}
{"level":"debug","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1b848081b5fe150ffa06e6c5b3f8f664040fdfa8163021bb69adef2911292c2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1b848081b5fe150ffa06e6c5b3f8f664040fdfa8163021bb69adef2911292c2"}
{"level":"debug","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1b848081b5fe150ffa06e6c5b3f8f664040fdfa8163021bb69adef2911292c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:02:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:02:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1b848081b5fe150ffa06e6c5b3f8f664040fdfa8163021bb69adef2911292c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1b848081b5fe150ffa06e6c5b3f8f664040fdfa8163021bb69adef2911292c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1b848081b5fe150ffa06e6c5b3f8f664040fdfa8163021bb69adef2911292c2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:02:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1b848081b5fe150ffa06e6c5b3f8f664040fdfa8163021bb69adef2911292c2"}
{"level":"info","ts":"2026-07-13T18:02:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"235f4058-79fe-4a8f-9e98-f02fd10f2209","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:39130","PortSpecifier":{"PortValue":39130}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"235f4058-79fe-4a8f-9e98-f02fd10f2209","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f54db3.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:02:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"235f4058-79fe-4a8f-9e98-f02fd10f2209","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:39130","PortSpecifier":{"PortValue":39130}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783965744,"nanos":652361103},"http":{"id":"235f4058-79fe-4a8f-9e98-f02fd10f2209","method":"POST","headers":{":authority":"e2e-shared-a-f54db3.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:02:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"235f4058-79fe-4a8f-9e98-f02fd10f2209","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T18:02:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"235f4058-79fe-4a8f-9e98-f02fd10f2209","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"aed4c252-5d29-4cf0-9404-468616a85f89","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e61dd9bf-ddf3-4b22-a82f-c5020a72ba79"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/132ce6b0ec12"]}}
{"level":"debug","ts":"2026-07-13T18:02:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"235f4058-79fe-4a8f-9e98-f02fd10f2209","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/132ce6b0ec12"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e61dd9bf-ddf3-4b22-a82f-c5020a72ba79"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"aed4c252-5d29-4cf0-9404-468616a85f89","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4a6339d21620610bfa04639f26a00e7fe569c929a38e1d32497951a4decc2288"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f54db3.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:02:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"235f4058-79fe-4a8f-9e98-f02fd10f2209","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:02:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"235f4058-79fe-4a8f-9e98-f02fd10f2209","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:02:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"235f4058-79fe-4a8f-9e98-f02fd10f2209","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f54db3/auth-test-model-f54db3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:02:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"235f4058-79fe-4a8f-9e98-f02fd10f2209","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T18:02:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"235f4058-79fe-4a8f-9e98-f02fd10f2209","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T18:02:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"235f4058-79fe-4a8f-9e98-f02fd10f2209","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T18:02:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"235f4058-79fe-4a8f-9e98-f02fd10f2209","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:02:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"235f4058-79fe-4a8f-9e98-f02fd10f2209","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:02:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8edfdc0c-cbed-4fa1-a638-b40c2e45a12c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:58160","PortSpecifier":{"PortValue":58160}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8edfdc0c-cbed-4fa1-a638-b40c2e45a12c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b57346.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:02:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8edfdc0c-cbed-4fa1-a638-b40c2e45a12c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:58160","PortSpecifier":{"PortValue":58160}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783965744,"nanos":717138834},"http":{"id":"8edfdc0c-cbed-4fa1-a638-b40c2e45a12c","method":"POST","headers":{":authority":"e2e-shared-b-b57346.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:02:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8edfdc0c-cbed-4fa1-a638-b40c2e45a12c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T18:02:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8edfdc0c-cbed-4fa1-a638-b40c2e45a12c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"aed4c252-5d29-4cf0-9404-468616a85f89","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e61dd9bf-ddf3-4b22-a82f-c5020a72ba79"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/132ce6b0ec12"]}}
{"level":"debug","ts":"2026-07-13T18:02:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8edfdc0c-cbed-4fa1-a638-b40c2e45a12c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/132ce6b0ec12"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e61dd9bf-ddf3-4b22-a82f-c5020a72ba79"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"aed4c252-5d29-4cf0-9404-468616a85f89","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7a2965aef3b7c2070a147b46e8814f5e0947cdbd04f47e55191ef4931e36aa19"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b57346.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:02:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8edfdc0c-cbed-4fa1-a638-b40c2e45a12c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:02:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8edfdc0c-cbed-4fa1-a638-b40c2e45a12c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:02:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8edfdc0c-cbed-4fa1-a638-b40c2e45a12c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b57346/auth-test-model-b57346\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:02:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8edfdc0c-cbed-4fa1-a638-b40c2e45a12c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T18:02:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8edfdc0c-cbed-4fa1-a638-b40c2e45a12c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T18:02:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8edfdc0c-cbed-4fa1-a638-b40c2e45a12c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T18:02:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8edfdc0c-cbed-4fa1-a638-b40c2e45a12c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:02:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8edfdc0c-cbed-4fa1-a638-b40c2e45a12c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:02:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"03d516a7-3621-4549-87d3-b115a3bd2c9b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:39138","PortSpecifier":{"PortValue":39138}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"03d516a7-3621-4549-87d3-b115a3bd2c9b","method":"GET","path":"/maas-api/v1/api-keys/a8de4ec3-2029-4c99-bf1e-114dbe600e6e","host":"e2e-shared-a-f54db3.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:02:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"03d516a7-3621-4549-87d3-b115a3bd2c9b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:39138","PortSpecifier":{"PortValue":39138}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783965744,"nanos":775142932},"http":{"id":"03d516a7-3621-4549-87d3-b115a3bd2c9b","method":"GET","headers":{":authority":"e2e-shared-a-f54db3.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a8de4ec3-2029-4c99-bf1e-114dbe600e6e",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:02:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"03d516a7-3621-4549-87d3-b115a3bd2c9b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T18:02:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"03d516a7-3621-4549-87d3-b115a3bd2c9b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"aed4c252-5d29-4cf0-9404-468616a85f89","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e61dd9bf-ddf3-4b22-a82f-c5020a72ba79"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/132ce6b0ec12"]}}
{"level":"debug","ts":"2026-07-13T18:02:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"03d516a7-3621-4549-87d3-b115a3bd2c9b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/132ce6b0ec12"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e61dd9bf-ddf3-4b22-a82f-c5020a72ba79"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"aed4c252-5d29-4cf0-9404-468616a85f89","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4a6339d21620610bfa04639f26a00e7fe569c929a38e1d32497951a4decc2288"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f54db3.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a8de4ec3-2029-4c99-bf1e-114dbe600e6e",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:02:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03d516a7-3621-4549-87d3-b115a3bd2c9b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:02:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03d516a7-3621-4549-87d3-b115a3bd2c9b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:02:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03d516a7-3621-4549-87d3-b115a3bd2c9b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f54db3/auth-test-model-f54db3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:02:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"03d516a7-3621-4549-87d3-b115a3bd2c9b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T18:02:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03d516a7-3621-4549-87d3-b115a3bd2c9b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T18:02:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03d516a7-3621-4549-87d3-b115a3bd2c9b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-13T18:02:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"03d516a7-3621-4549-87d3-b115a3bd2c9b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:02:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"03d516a7-3621-4549-87d3-b115a3bd2c9b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:02:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fe774022-1ebd-493d-9924-eb2642d89f11","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:58162","PortSpecifier":{"PortValue":58162}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fe774022-1ebd-493d-9924-eb2642d89f11","method":"GET","path":"/maas-api/v1/api-keys/5457cd5d-a6db-4eb6-819b-8294f68ec03f","host":"e2e-shared-b-b57346.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:02:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fe774022-1ebd-493d-9924-eb2642d89f11","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:58162","PortSpecifier":{"PortValue":58162}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783965744,"nanos":813492554},"http":{"id":"fe774022-1ebd-493d-9924-eb2642d89f11","method":"GET","headers":{":authority":"e2e-shared-b-b57346.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/5457cd5d-a6db-4eb6-819b-8294f68ec03f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:02:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fe774022-1ebd-493d-9924-eb2642d89f11","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T18:02:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fe774022-1ebd-493d-9924-eb2642d89f11","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"aed4c252-5d29-4cf0-9404-468616a85f89","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e61dd9bf-ddf3-4b22-a82f-c5020a72ba79"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/132ce6b0ec12"]}}
{"level":"debug","ts":"2026-07-13T18:02:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fe774022-1ebd-493d-9924-eb2642d89f11","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/132ce6b0ec12"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e61dd9bf-ddf3-4b22-a82f-c5020a72ba79"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"aed4c252-5d29-4cf0-9404-468616a85f89","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7a2965aef3b7c2070a147b46e8814f5e0947cdbd04f47e55191ef4931e36aa19"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b57346.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/5457cd5d-a6db-4eb6-819b-8294f68ec03f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:02:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe774022-1ebd-493d-9924-eb2642d89f11","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:02:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe774022-1ebd-493d-9924-eb2642d89f11","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:02:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe774022-1ebd-493d-9924-eb2642d89f11","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b57346/auth-test-model-b57346\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:02:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fe774022-1ebd-493d-9924-eb2642d89f11","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T18:02:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe774022-1ebd-493d-9924-eb2642d89f11","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T18:02:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe774022-1ebd-493d-9924-eb2642d89f11","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T18:02:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fe774022-1ebd-493d-9924-eb2642d89f11","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:02:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fe774022-1ebd-493d-9924-eb2642d89f11","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:02:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"facb9dc6-eee5-4ff2-9476-4b76cb1385e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:52576","PortSpecifier":{"PortValue":52576}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"facb9dc6-eee5-4ff2-9476-4b76cb1385e1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f54db3.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:02:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"facb9dc6-eee5-4ff2-9476-4b76cb1385e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:52576","PortSpecifier":{"PortValue":52576}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783965763,"nanos":53890412},"http":{"id":"facb9dc6-eee5-4ff2-9476-4b76cb1385e1","method":"POST","headers":{":authority":"e2e-shared-a-f54db3.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:02:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"facb9dc6-eee5-4ff2-9476-4b76cb1385e1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T18:02:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"facb9dc6-eee5-4ff2-9476-4b76cb1385e1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"aed4c252-5d29-4cf0-9404-468616a85f89","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e61dd9bf-ddf3-4b22-a82f-c5020a72ba79"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/132ce6b0ec12"]}}
{"level":"debug","ts":"2026-07-13T18:02:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"facb9dc6-eee5-4ff2-9476-4b76cb1385e1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/132ce6b0ec12"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e61dd9bf-ddf3-4b22-a82f-c5020a72ba79"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"aed4c252-5d29-4cf0-9404-468616a85f89","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4a6339d21620610bfa04639f26a00e7fe569c929a38e1d32497951a4decc2288"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f54db3.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:02:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"facb9dc6-eee5-4ff2-9476-4b76cb1385e1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:02:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"facb9dc6-eee5-4ff2-9476-4b76cb1385e1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:02:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"facb9dc6-eee5-4ff2-9476-4b76cb1385e1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f54db3/auth-test-model-f54db3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:02:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"facb9dc6-eee5-4ff2-9476-4b76cb1385e1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T18:02:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"facb9dc6-eee5-4ff2-9476-4b76cb1385e1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T18:02:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"facb9dc6-eee5-4ff2-9476-4b76cb1385e1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-13T18:02:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"facb9dc6-eee5-4ff2-9476-4b76cb1385e1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:02:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"facb9dc6-eee5-4ff2-9476-4b76cb1385e1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:02:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ea296e4c-3b70-4ecd-aec6-ffea31702b99","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:59824","PortSpecifier":{"PortValue":59824}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ea296e4c-3b70-4ecd-aec6-ffea31702b99","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b57346.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:02:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ea296e4c-3b70-4ecd-aec6-ffea31702b99","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:59824","PortSpecifier":{"PortValue":59824}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783965763,"nanos":92751769},"http":{"id":"ea296e4c-3b70-4ecd-aec6-ffea31702b99","method":"POST","headers":{":authority":"e2e-shared-b-b57346.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:02:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ea296e4c-3b70-4ecd-aec6-ffea31702b99","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T18:02:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ea296e4c-3b70-4ecd-aec6-ffea31702b99","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"aed4c252-5d29-4cf0-9404-468616a85f89","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e61dd9bf-ddf3-4b22-a82f-c5020a72ba79"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/132ce6b0ec12"]}}
{"level":"debug","ts":"2026-07-13T18:02:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ea296e4c-3b70-4ecd-aec6-ffea31702b99","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/132ce6b0ec12"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e61dd9bf-ddf3-4b22-a82f-c5020a72ba79"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"aed4c252-5d29-4cf0-9404-468616a85f89","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7a2965aef3b7c2070a147b46e8814f5e0947cdbd04f47e55191ef4931e36aa19"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b57346.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:02:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea296e4c-3b70-4ecd-aec6-ffea31702b99","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:02:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea296e4c-3b70-4ecd-aec6-ffea31702b99","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:02:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea296e4c-3b70-4ecd-aec6-ffea31702b99","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b57346/auth-test-model-b57346\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:02:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ea296e4c-3b70-4ecd-aec6-ffea31702b99","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T18:02:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea296e4c-3b70-4ecd-aec6-ffea31702b99","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T18:02:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea296e4c-3b70-4ecd-aec6-ffea31702b99","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-13T18:02:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ea296e4c-3b70-4ecd-aec6-ffea31702b99","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:02:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ea296e4c-3b70-4ecd-aec6-ffea31702b99","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:02:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a5985e69-93ba-4449-90ed-6a03cd830eff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:52578","PortSpecifier":{"PortValue":52578}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a5985e69-93ba-4449-90ed-6a03cd830eff","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-f54db3.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:02:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a5985e69-93ba-4449-90ed-6a03cd830eff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:52578","PortSpecifier":{"PortValue":52578}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783965763,"nanos":134733015},"http":{"id":"a5985e69-93ba-4449-90ed-6a03cd830eff","method":"GET","headers":{":authority":"e2e-shared-a-f54db3.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:02:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a5985e69-93ba-4449-90ed-6a03cd830eff","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-7lhCO2GPJ4Cc7zJ0_QuFm2gDslM2dsPZg7xX1z1wARLapnSE6lyxWNu3BlfI"}
{"level":"debug","ts":"2026-07-13T18:02:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a5985e69-93ba-4449-90ed-6a03cd830eff","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f54db3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-7lhCO2GPJ4Cc7zJ0_QuFm2gDslM2dsPZg7xX1z1wARLapnSE6lyxWNu3BlfI\"}"}
{"level":"debug","ts":"2026-07-13T18:02:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a5985e69-93ba-4449-90ed-6a03cd830eff","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f54db3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6a66d62f-c98e-4463-9b36-94a5f5d21214","keyName":"e2e-auth-iso-a-8b816a","subscription":"e2e-auth-iso-6bc754","tenant":"e2e-shared-a-f54db3","userId":"6a66d62f-c98e-4463-9b36-94a5f5d21214","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T18:02:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a5985e69-93ba-4449-90ed-6a03cd830eff","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:02:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5985e69-93ba-4449-90ed-6a03cd830eff","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:02:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5985e69-93ba-4449-90ed-6a03cd830eff","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:02:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5985e69-93ba-4449-90ed-6a03cd830eff","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f54db3/auth-test-model-f54db3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:02:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a5985e69-93ba-4449-90ed-6a03cd830eff","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T18:02:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a5985e69-93ba-4449-90ed-6a03cd830eff","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T18:02:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a5985e69-93ba-4449-90ed-6a03cd830eff","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-6bc754"}
{"level":"debug","ts":"2026-07-13T18:02:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a5985e69-93ba-4449-90ed-6a03cd830eff","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-13T18:02:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a5985e69-93ba-4449-90ed-6a03cd830eff","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:02:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a5985e69-93ba-4449-90ed-6a03cd830eff","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:03:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"65a43995-7df0-4f05-9f8a-6f4b67cbcec7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:50550","PortSpecifier":{"PortValue":50550}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"65a43995-7df0-4f05-9f8a-6f4b67cbcec7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f54db3.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:03:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"65a43995-7df0-4f05-9f8a-6f4b67cbcec7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:50550","PortSpecifier":{"PortValue":50550}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783965780,"nanos":398099535},"http":{"id":"65a43995-7df0-4f05-9f8a-6f4b67cbcec7","method":"POST","headers":{":authority":"e2e-shared-a-f54db3.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:03:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"65a43995-7df0-4f05-9f8a-6f4b67cbcec7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T18:03:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"65a43995-7df0-4f05-9f8a-6f4b67cbcec7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"aed4c252-5d29-4cf0-9404-468616a85f89","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e61dd9bf-ddf3-4b22-a82f-c5020a72ba79"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/132ce6b0ec12"]}}
{"level":"debug","ts":"2026-07-13T18:03:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"65a43995-7df0-4f05-9f8a-6f4b67cbcec7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/132ce6b0ec12"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e61dd9bf-ddf3-4b22-a82f-c5020a72ba79"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"aed4c252-5d29-4cf0-9404-468616a85f89","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4a6339d21620610bfa04639f26a00e7fe569c929a38e1d32497951a4decc2288"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f54db3.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:03:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65a43995-7df0-4f05-9f8a-6f4b67cbcec7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:03:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65a43995-7df0-4f05-9f8a-6f4b67cbcec7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:03:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65a43995-7df0-4f05-9f8a-6f4b67cbcec7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f54db3/auth-test-model-f54db3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:03:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"65a43995-7df0-4f05-9f8a-6f4b67cbcec7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T18:03:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65a43995-7df0-4f05-9f8a-6f4b67cbcec7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T18:03:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65a43995-7df0-4f05-9f8a-6f4b67cbcec7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T18:03:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"65a43995-7df0-4f05-9f8a-6f4b67cbcec7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:03:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"65a43995-7df0-4f05-9f8a-6f4b67cbcec7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:03:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2ff89bb1-dc04-4ade-923c-bfbcb0d600b8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:51990","PortSpecifier":{"PortValue":51990}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2ff89bb1-dc04-4ade-923c-bfbcb0d600b8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b57346.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:03:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2ff89bb1-dc04-4ade-923c-bfbcb0d600b8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:51990","PortSpecifier":{"PortValue":51990}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783965780,"nanos":437942831},"http":{"id":"2ff89bb1-dc04-4ade-923c-bfbcb0d600b8","method":"POST","headers":{":authority":"e2e-shared-b-b57346.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:03:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2ff89bb1-dc04-4ade-923c-bfbcb0d600b8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T18:03:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2ff89bb1-dc04-4ade-923c-bfbcb0d600b8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"aed4c252-5d29-4cf0-9404-468616a85f89","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e61dd9bf-ddf3-4b22-a82f-c5020a72ba79"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/132ce6b0ec12"]}}
{"level":"debug","ts":"2026-07-13T18:03:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2ff89bb1-dc04-4ade-923c-bfbcb0d600b8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/132ce6b0ec12"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e61dd9bf-ddf3-4b22-a82f-c5020a72ba79"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"aed4c252-5d29-4cf0-9404-468616a85f89","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7a2965aef3b7c2070a147b46e8814f5e0947cdbd04f47e55191ef4931e36aa19"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b57346.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:03:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ff89bb1-dc04-4ade-923c-bfbcb0d600b8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:03:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ff89bb1-dc04-4ade-923c-bfbcb0d600b8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:03:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ff89bb1-dc04-4ade-923c-bfbcb0d600b8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b57346/auth-test-model-b57346\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:03:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2ff89bb1-dc04-4ade-923c-bfbcb0d600b8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T18:03:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ff89bb1-dc04-4ade-923c-bfbcb0d600b8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T18:03:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ff89bb1-dc04-4ade-923c-bfbcb0d600b8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T18:03:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2ff89bb1-dc04-4ade-923c-bfbcb0d600b8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:03:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2ff89bb1-dc04-4ade-923c-bfbcb0d600b8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:03:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d9c818ee-d998-4e09-8539-a20356b945c1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:51992","PortSpecifier":{"PortValue":51992}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d9c818ee-d998-4e09-8539-a20356b945c1","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-b57346.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:03:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d9c818ee-d998-4e09-8539-a20356b945c1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:51992","PortSpecifier":{"PortValue":51992}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783965780,"nanos":473801443},"http":{"id":"d9c818ee-d998-4e09-8539-a20356b945c1","method":"GET","headers":{":authority":"e2e-shared-b-b57346.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:03:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d9c818ee-d998-4e09-8539-a20356b945c1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1YxkbdI2SLOGeqoxz_Vx42VxcWhJyfzcEWUrJqAj3cbfcwb0MkSnP2rzS4OqV"}
{"level":"debug","ts":"2026-07-13T18:03:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d9c818ee-d998-4e09-8539-a20356b945c1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-b57346.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1YxkbdI2SLOGeqoxz_Vx42VxcWhJyfzcEWUrJqAj3cbfcwb0MkSnP2rzS4OqV\"}"}
{"level":"debug","ts":"2026-07-13T18:03:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d9c818ee-d998-4e09-8539-a20356b945c1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b57346.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-13T18:03:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d9c818ee-d998-4e09-8539-a20356b945c1","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"7a2965aef3b7c2070a147b46e8814f5e0947cdbd04f47e55191ef4931e36aa19"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b57346.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:03:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9c818ee-d998-4e09-8539-a20356b945c1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:03:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"d9c818ee-d998-4e09-8539-a20356b945c1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-13T18:03:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d9c818ee-d998-4e09-8539-a20356b945c1","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-13T18:03:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d9c818ee-d998-4e09-8539-a20356b945c1","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-13T18:03:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f59ec0ef-9ffb-4d7b-b216-6139dbe53c26","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:48440","PortSpecifier":{"PortValue":48440}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f59ec0ef-9ffb-4d7b-b216-6139dbe53c26","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f54db3.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:03:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f59ec0ef-9ffb-4d7b-b216-6139dbe53c26","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:48440","PortSpecifier":{"PortValue":48440}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783965793,"nanos":453484773},"http":{"id":"f59ec0ef-9ffb-4d7b-b216-6139dbe53c26","method":"POST","headers":{":authority":"e2e-shared-a-f54db3.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:03:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f59ec0ef-9ffb-4d7b-b216-6139dbe53c26","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T18:03:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f59ec0ef-9ffb-4d7b-b216-6139dbe53c26","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"aed4c252-5d29-4cf0-9404-468616a85f89","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e61dd9bf-ddf3-4b22-a82f-c5020a72ba79"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/132ce6b0ec12"]}}
{"level":"debug","ts":"2026-07-13T18:03:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f59ec0ef-9ffb-4d7b-b216-6139dbe53c26","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/132ce6b0ec12"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e61dd9bf-ddf3-4b22-a82f-c5020a72ba79"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"aed4c252-5d29-4cf0-9404-468616a85f89","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4a6339d21620610bfa04639f26a00e7fe569c929a38e1d32497951a4decc2288"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f54db3.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:03:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f59ec0ef-9ffb-4d7b-b216-6139dbe53c26","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:03:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f59ec0ef-9ffb-4d7b-b216-6139dbe53c26","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:03:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f59ec0ef-9ffb-4d7b-b216-6139dbe53c26","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f54db3/auth-test-model-f54db3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:03:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f59ec0ef-9ffb-4d7b-b216-6139dbe53c26","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T18:03:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f59ec0ef-9ffb-4d7b-b216-6139dbe53c26","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T18:03:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f59ec0ef-9ffb-4d7b-b216-6139dbe53c26","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T18:03:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f59ec0ef-9ffb-4d7b-b216-6139dbe53c26","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:03:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f59ec0ef-9ffb-4d7b-b216-6139dbe53c26","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:03:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a244670f-220a-45b8-9ec0-fa536b231596","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:60896","PortSpecifier":{"PortValue":60896}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a244670f-220a-45b8-9ec0-fa536b231596","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b57346.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:03:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a244670f-220a-45b8-9ec0-fa536b231596","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:60896","PortSpecifier":{"PortValue":60896}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783965793,"nanos":492242305},"http":{"id":"a244670f-220a-45b8-9ec0-fa536b231596","method":"POST","headers":{":authority":"e2e-shared-b-b57346.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:03:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a244670f-220a-45b8-9ec0-fa536b231596","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T18:03:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a244670f-220a-45b8-9ec0-fa536b231596","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"aed4c252-5d29-4cf0-9404-468616a85f89","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e61dd9bf-ddf3-4b22-a82f-c5020a72ba79"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/132ce6b0ec12"]}}
{"level":"debug","ts":"2026-07-13T18:03:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a244670f-220a-45b8-9ec0-fa536b231596","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/132ce6b0ec12"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e61dd9bf-ddf3-4b22-a82f-c5020a72ba79"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"aed4c252-5d29-4cf0-9404-468616a85f89","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7a2965aef3b7c2070a147b46e8814f5e0947cdbd04f47e55191ef4931e36aa19"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b57346.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:03:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a244670f-220a-45b8-9ec0-fa536b231596","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:03:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a244670f-220a-45b8-9ec0-fa536b231596","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:03:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a244670f-220a-45b8-9ec0-fa536b231596","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b57346/auth-test-model-b57346\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:03:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a244670f-220a-45b8-9ec0-fa536b231596","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T18:03:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a244670f-220a-45b8-9ec0-fa536b231596","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T18:03:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a244670f-220a-45b8-9ec0-fa536b231596","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T18:03:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a244670f-220a-45b8-9ec0-fa536b231596","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:03:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a244670f-220a-45b8-9ec0-fa536b231596","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:03:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9146e92c-9767-4827-b2aa-abf11db179b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:48446","PortSpecifier":{"PortValue":48446}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9146e92c-9767-4827-b2aa-abf11db179b4","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-f54db3.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:03:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9146e92c-9767-4827-b2aa-abf11db179b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:48446","PortSpecifier":{"PortValue":48446}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783965793,"nanos":533126632},"http":{"id":"9146e92c-9767-4827-b2aa-abf11db179b4","method":"POST","headers":{":authority":"e2e-shared-a-f54db3.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:03:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9146e92c-9767-4827-b2aa-abf11db179b4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T18:03:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9146e92c-9767-4827-b2aa-abf11db179b4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"aed4c252-5d29-4cf0-9404-468616a85f89","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e61dd9bf-ddf3-4b22-a82f-c5020a72ba79"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/132ce6b0ec12"]}}
{"level":"debug","ts":"2026-07-13T18:03:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9146e92c-9767-4827-b2aa-abf11db179b4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/132ce6b0ec12"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e61dd9bf-ddf3-4b22-a82f-c5020a72ba79"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"aed4c252-5d29-4cf0-9404-468616a85f89","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4a6339d21620610bfa04639f26a00e7fe569c929a38e1d32497951a4decc2288"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f54db3.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:03:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9146e92c-9767-4827-b2aa-abf11db179b4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:03:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9146e92c-9767-4827-b2aa-abf11db179b4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:03:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9146e92c-9767-4827-b2aa-abf11db179b4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f54db3/auth-test-model-f54db3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:03:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9146e92c-9767-4827-b2aa-abf11db179b4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T18:03:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9146e92c-9767-4827-b2aa-abf11db179b4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T18:03:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9146e92c-9767-4827-b2aa-abf11db179b4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T18:03:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9146e92c-9767-4827-b2aa-abf11db179b4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:03:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9146e92c-9767-4827-b2aa-abf11db179b4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:03:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"93fe8649-f25c-4fc8-af50-991896070dee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:60898","PortSpecifier":{"PortValue":60898}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"93fe8649-f25c-4fc8-af50-991896070dee","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-b57346.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:03:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"93fe8649-f25c-4fc8-af50-991896070dee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:60898","PortSpecifier":{"PortValue":60898}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783965793,"nanos":570932323},"http":{"id":"93fe8649-f25c-4fc8-af50-991896070dee","method":"POST","headers":{":authority":"e2e-shared-b-b57346.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:03:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"93fe8649-f25c-4fc8-af50-991896070dee","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T18:03:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"93fe8649-f25c-4fc8-af50-991896070dee","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"aed4c252-5d29-4cf0-9404-468616a85f89","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e61dd9bf-ddf3-4b22-a82f-c5020a72ba79"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/132ce6b0ec12"]}}
{"level":"debug","ts":"2026-07-13T18:03:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"93fe8649-f25c-4fc8-af50-991896070dee","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/132ce6b0ec12"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e61dd9bf-ddf3-4b22-a82f-c5020a72ba79"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"aed4c252-5d29-4cf0-9404-468616a85f89","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7a2965aef3b7c2070a147b46e8814f5e0947cdbd04f47e55191ef4931e36aa19"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b57346.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:03:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93fe8649-f25c-4fc8-af50-991896070dee","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:03:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93fe8649-f25c-4fc8-af50-991896070dee","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:03:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93fe8649-f25c-4fc8-af50-991896070dee","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b57346/auth-test-model-b57346\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:03:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"93fe8649-f25c-4fc8-af50-991896070dee","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T18:03:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"93fe8649-f25c-4fc8-af50-991896070dee","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T18:03:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"93fe8649-f25c-4fc8-af50-991896070dee","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-13T18:03:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"93fe8649-f25c-4fc8-af50-991896070dee","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:03:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"93fe8649-f25c-4fc8-af50-991896070dee","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:03:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a1dad6ef-6ffb-4f95-81c3-fdd995f64962","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:36444","PortSpecifier":{"PortValue":36444}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a1dad6ef-6ffb-4f95-81c3-fdd995f64962","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f54db3.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:03:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a1dad6ef-6ffb-4f95-81c3-fdd995f64962","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:36444","PortSpecifier":{"PortValue":36444}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783965808,"nanos":646781886},"http":{"id":"a1dad6ef-6ffb-4f95-81c3-fdd995f64962","method":"POST","headers":{":authority":"e2e-shared-a-f54db3.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:03:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a1dad6ef-6ffb-4f95-81c3-fdd995f64962","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T18:03:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a1dad6ef-6ffb-4f95-81c3-fdd995f64962","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"aed4c252-5d29-4cf0-9404-468616a85f89","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e61dd9bf-ddf3-4b22-a82f-c5020a72ba79"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/132ce6b0ec12"]}}
{"level":"debug","ts":"2026-07-13T18:03:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a1dad6ef-6ffb-4f95-81c3-fdd995f64962","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/132ce6b0ec12"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e61dd9bf-ddf3-4b22-a82f-c5020a72ba79"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"aed4c252-5d29-4cf0-9404-468616a85f89","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4a6339d21620610bfa04639f26a00e7fe569c929a38e1d32497951a4decc2288"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f54db3.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:03:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1dad6ef-6ffb-4f95-81c3-fdd995f64962","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:03:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1dad6ef-6ffb-4f95-81c3-fdd995f64962","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:03:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1dad6ef-6ffb-4f95-81c3-fdd995f64962","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f54db3/auth-test-model-f54db3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:03:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a1dad6ef-6ffb-4f95-81c3-fdd995f64962","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T18:03:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a1dad6ef-6ffb-4f95-81c3-fdd995f64962","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T18:03:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a1dad6ef-6ffb-4f95-81c3-fdd995f64962","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-13T18:03:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a1dad6ef-6ffb-4f95-81c3-fdd995f64962","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:03:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a1dad6ef-6ffb-4f95-81c3-fdd995f64962","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:03:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e12bcdbf-9299-4dd6-9669-acab41af55aa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:56822","PortSpecifier":{"PortValue":56822}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e12bcdbf-9299-4dd6-9669-acab41af55aa","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b57346.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:03:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e12bcdbf-9299-4dd6-9669-acab41af55aa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:56822","PortSpecifier":{"PortValue":56822}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783965808,"nanos":691147237},"http":{"id":"e12bcdbf-9299-4dd6-9669-acab41af55aa","method":"POST","headers":{":authority":"e2e-shared-b-b57346.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:03:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e12bcdbf-9299-4dd6-9669-acab41af55aa","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T18:03:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e12bcdbf-9299-4dd6-9669-acab41af55aa","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"aed4c252-5d29-4cf0-9404-468616a85f89","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e61dd9bf-ddf3-4b22-a82f-c5020a72ba79"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/132ce6b0ec12"]}}
{"level":"debug","ts":"2026-07-13T18:03:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e12bcdbf-9299-4dd6-9669-acab41af55aa","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/132ce6b0ec12"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e61dd9bf-ddf3-4b22-a82f-c5020a72ba79"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"aed4c252-5d29-4cf0-9404-468616a85f89","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7a2965aef3b7c2070a147b46e8814f5e0947cdbd04f47e55191ef4931e36aa19"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b57346.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:03:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e12bcdbf-9299-4dd6-9669-acab41af55aa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:03:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e12bcdbf-9299-4dd6-9669-acab41af55aa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:03:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e12bcdbf-9299-4dd6-9669-acab41af55aa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b57346/auth-test-model-b57346\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:03:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e12bcdbf-9299-4dd6-9669-acab41af55aa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T18:03:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e12bcdbf-9299-4dd6-9669-acab41af55aa","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T18:03:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e12bcdbf-9299-4dd6-9669-acab41af55aa","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T18:03:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e12bcdbf-9299-4dd6-9669-acab41af55aa","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:03:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e12bcdbf-9299-4dd6-9669-acab41af55aa","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:03:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a26fe84a-2c2a-4316-b992-0bb68c2db878","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:56826","PortSpecifier":{"PortValue":56826}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a26fe84a-2c2a-4316-b992-0bb68c2db878","method":"GET","path":"/maas-api/v1/api-keys/55958a90-d779-410c-acb8-9ac53c32b0be","host":"e2e-shared-b-b57346.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:03:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a26fe84a-2c2a-4316-b992-0bb68c2db878","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:56826","PortSpecifier":{"PortValue":56826}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783965808,"nanos":731900734},"http":{"id":"a26fe84a-2c2a-4316-b992-0bb68c2db878","method":"GET","headers":{":authority":"e2e-shared-b-b57346.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/55958a90-d779-410c-acb8-9ac53c32b0be",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:03:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a26fe84a-2c2a-4316-b992-0bb68c2db878","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T18:03:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a26fe84a-2c2a-4316-b992-0bb68c2db878","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"aed4c252-5d29-4cf0-9404-468616a85f89","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e61dd9bf-ddf3-4b22-a82f-c5020a72ba79"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/132ce6b0ec12"]}}
{"level":"debug","ts":"2026-07-13T18:03:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a26fe84a-2c2a-4316-b992-0bb68c2db878","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/132ce6b0ec12"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e61dd9bf-ddf3-4b22-a82f-c5020a72ba79"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"aed4c252-5d29-4cf0-9404-468616a85f89","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7a2965aef3b7c2070a147b46e8814f5e0947cdbd04f47e55191ef4931e36aa19"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b57346.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/55958a90-d779-410c-acb8-9ac53c32b0be",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:03:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a26fe84a-2c2a-4316-b992-0bb68c2db878","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:03:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a26fe84a-2c2a-4316-b992-0bb68c2db878","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:03:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a26fe84a-2c2a-4316-b992-0bb68c2db878","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b57346/auth-test-model-b57346\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:03:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a26fe84a-2c2a-4316-b992-0bb68c2db878","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T18:03:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a26fe84a-2c2a-4316-b992-0bb68c2db878","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T18:03:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a26fe84a-2c2a-4316-b992-0bb68c2db878","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-13T18:03:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a26fe84a-2c2a-4316-b992-0bb68c2db878","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:03:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a26fe84a-2c2a-4316-b992-0bb68c2db878","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:03:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3782bb0b-3e38-474b-ae8e-2bdbda6053c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:36454","PortSpecifier":{"PortValue":36454}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3782bb0b-3e38-474b-ae8e-2bdbda6053c7","method":"GET","path":"/maas-api/v1/api-keys/55958a90-d779-410c-acb8-9ac53c32b0be","host":"e2e-shared-a-f54db3.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:03:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3782bb0b-3e38-474b-ae8e-2bdbda6053c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:36454","PortSpecifier":{"PortValue":36454}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783965808,"nanos":764201534},"http":{"id":"3782bb0b-3e38-474b-ae8e-2bdbda6053c7","method":"GET","headers":{":authority":"e2e-shared-a-f54db3.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/55958a90-d779-410c-acb8-9ac53c32b0be",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:03:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3782bb0b-3e38-474b-ae8e-2bdbda6053c7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T18:03:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3782bb0b-3e38-474b-ae8e-2bdbda6053c7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"aed4c252-5d29-4cf0-9404-468616a85f89","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e61dd9bf-ddf3-4b22-a82f-c5020a72ba79"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/132ce6b0ec12"]}}
{"level":"debug","ts":"2026-07-13T18:03:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3782bb0b-3e38-474b-ae8e-2bdbda6053c7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/132ce6b0ec12"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e61dd9bf-ddf3-4b22-a82f-c5020a72ba79"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"aed4c252-5d29-4cf0-9404-468616a85f89","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4a6339d21620610bfa04639f26a00e7fe569c929a38e1d32497951a4decc2288"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f54db3.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/55958a90-d779-410c-acb8-9ac53c32b0be",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:03:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3782bb0b-3e38-474b-ae8e-2bdbda6053c7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:03:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3782bb0b-3e38-474b-ae8e-2bdbda6053c7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:03:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3782bb0b-3e38-474b-ae8e-2bdbda6053c7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f54db3/auth-test-model-f54db3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:03:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3782bb0b-3e38-474b-ae8e-2bdbda6053c7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T18:03:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3782bb0b-3e38-474b-ae8e-2bdbda6053c7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T18:03:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3782bb0b-3e38-474b-ae8e-2bdbda6053c7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-13T18:03:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3782bb0b-3e38-474b-ae8e-2bdbda6053c7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:03:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3782bb0b-3e38-474b-ae8e-2bdbda6053c7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:03:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bd94b3c2-a7cd-4046-8a00-f5fc67bedf1c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:41496","PortSpecifier":{"PortValue":41496}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bd94b3c2-a7cd-4046-8a00-f5fc67bedf1c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f54db3.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:03:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bd94b3c2-a7cd-4046-8a00-f5fc67bedf1c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:41496","PortSpecifier":{"PortValue":41496}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783965828,"nanos":97878659},"http":{"id":"bd94b3c2-a7cd-4046-8a00-f5fc67bedf1c","method":"POST","headers":{":authority":"e2e-shared-a-f54db3.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:03:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bd94b3c2-a7cd-4046-8a00-f5fc67bedf1c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T18:03:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bd94b3c2-a7cd-4046-8a00-f5fc67bedf1c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"aed4c252-5d29-4cf0-9404-468616a85f89","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e61dd9bf-ddf3-4b22-a82f-c5020a72ba79"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/132ce6b0ec12"]}}
{"level":"debug","ts":"2026-07-13T18:03:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bd94b3c2-a7cd-4046-8a00-f5fc67bedf1c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/132ce6b0ec12"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e61dd9bf-ddf3-4b22-a82f-c5020a72ba79"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"aed4c252-5d29-4cf0-9404-468616a85f89","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4a6339d21620610bfa04639f26a00e7fe569c929a38e1d32497951a4decc2288"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f54db3.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:03:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bd94b3c2-a7cd-4046-8a00-f5fc67bedf1c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:03:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bd94b3c2-a7cd-4046-8a00-f5fc67bedf1c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:03:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bd94b3c2-a7cd-4046-8a00-f5fc67bedf1c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f54db3/auth-test-model-f54db3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:03:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bd94b3c2-a7cd-4046-8a00-f5fc67bedf1c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T18:03:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bd94b3c2-a7cd-4046-8a00-f5fc67bedf1c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T18:03:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bd94b3c2-a7cd-4046-8a00-f5fc67bedf1c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-13T18:03:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bd94b3c2-a7cd-4046-8a00-f5fc67bedf1c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:03:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bd94b3c2-a7cd-4046-8a00-f5fc67bedf1c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:03:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6f6fed28-67e3-440a-b682-0883c1bc7680","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:48002","PortSpecifier":{"PortValue":48002}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6f6fed28-67e3-440a-b682-0883c1bc7680","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b57346.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:03:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6f6fed28-67e3-440a-b682-0883c1bc7680","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:48002","PortSpecifier":{"PortValue":48002}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783965828,"nanos":141621370},"http":{"id":"6f6fed28-67e3-440a-b682-0883c1bc7680","method":"POST","headers":{":authority":"e2e-shared-b-b57346.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:03:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6f6fed28-67e3-440a-b682-0883c1bc7680","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T18:03:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6f6fed28-67e3-440a-b682-0883c1bc7680","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"aed4c252-5d29-4cf0-9404-468616a85f89","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e61dd9bf-ddf3-4b22-a82f-c5020a72ba79"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/132ce6b0ec12"]}}
{"level":"debug","ts":"2026-07-13T18:03:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6f6fed28-67e3-440a-b682-0883c1bc7680","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/132ce6b0ec12"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e61dd9bf-ddf3-4b22-a82f-c5020a72ba79"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"aed4c252-5d29-4cf0-9404-468616a85f89","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7a2965aef3b7c2070a147b46e8814f5e0947cdbd04f47e55191ef4931e36aa19"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b57346.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:03:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f6fed28-67e3-440a-b682-0883c1bc7680","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:03:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f6fed28-67e3-440a-b682-0883c1bc7680","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:03:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f6fed28-67e3-440a-b682-0883c1bc7680","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b57346/auth-test-model-b57346\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:03:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6f6fed28-67e3-440a-b682-0883c1bc7680","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T18:03:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6f6fed28-67e3-440a-b682-0883c1bc7680","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T18:03:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6f6fed28-67e3-440a-b682-0883c1bc7680","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-13T18:03:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6f6fed28-67e3-440a-b682-0883c1bc7680","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:03:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6f6fed28-67e3-440a-b682-0883c1bc7680","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:03:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dcfeec82-0418-4287-8d58-7925f9255db1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:41510","PortSpecifier":{"PortValue":41510}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dcfeec82-0418-4287-8d58-7925f9255db1","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-f54db3.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:03:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dcfeec82-0418-4287-8d58-7925f9255db1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:41510","PortSpecifier":{"PortValue":41510}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783965828,"nanos":178230916},"http":{"id":"dcfeec82-0418-4287-8d58-7925f9255db1","method":"POST","headers":{":authority":"e2e-shared-a-f54db3.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:03:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dcfeec82-0418-4287-8d58-7925f9255db1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-X58E9MHmh0q7pl8R_r1LGYRqDC88I5GzY5b75lrZMlI6KVKYkqI1YcKHqlnR"}
{"level":"debug","ts":"2026-07-13T18:03:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dcfeec82-0418-4287-8d58-7925f9255db1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f54db3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-X58E9MHmh0q7pl8R_r1LGYRqDC88I5GzY5b75lrZMlI6KVKYkqI1YcKHqlnR\"}"}
{"level":"debug","ts":"2026-07-13T18:03:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dcfeec82-0418-4287-8d58-7925f9255db1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f54db3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"474d72f7-025c-46ed-92a8-7061a701d198","keyName":"e2e-auth-iso-a-338301","subscription":"e2e-auth-iso-f1a194","tenant":"e2e-shared-a-f54db3","userId":"474d72f7-025c-46ed-92a8-7061a701d198","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T18:03:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dcfeec82-0418-4287-8d58-7925f9255db1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:03:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dcfeec82-0418-4287-8d58-7925f9255db1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:03:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dcfeec82-0418-4287-8d58-7925f9255db1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:03:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dcfeec82-0418-4287-8d58-7925f9255db1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f54db3/auth-test-model-f54db3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:03:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dcfeec82-0418-4287-8d58-7925f9255db1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T18:03:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dcfeec82-0418-4287-8d58-7925f9255db1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T18:03:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dcfeec82-0418-4287-8d58-7925f9255db1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-f1a194"}
{"level":"debug","ts":"2026-07-13T18:03:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dcfeec82-0418-4287-8d58-7925f9255db1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-13T18:03:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dcfeec82-0418-4287-8d58-7925f9255db1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:03:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dcfeec82-0418-4287-8d58-7925f9255db1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:03:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/20953488b99c0985461b29fbfc70ac90e6be7568a1ad42d4fbd38e76b839c164"}
{"level":"info","ts":"2026-07-13T18:03:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4fdecc5af35a51bd40a5c27ae7e7c71301ff55d5fe6edd5ea55bf66a580b9751"}
{"level":"info","ts":"2026-07-13T18:03:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/18c9542ee2b26f3820896d5e9c9c4977db155f073e88234488981ebb3534e4eb"}
{"level":"info","ts":"2026-07-13T18:03:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e76dd23f16d22b614f25c37311f7b0734cae93acc32f29fda9f2cbb10ab9c298"}
{"level":"info","ts":"2026-07-13T18:03:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6e587982a2e7d56d247ef74c417ee8c18543f66d34510c2bc4fbe87d50be70a1"}
{"level":"info","ts":"2026-07-13T18:03:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/184ae4c2d40e05f9404542a6751a99cad580ff20b848781f0370c58c08e6917c"}
{"level":"info","ts":"2026-07-13T18:03:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b69f430585271dc575479bf251a09ed0a3992c7640d18f0c475e07388151623b"}
{"level":"info","ts":"2026-07-13T18:03:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a4e030a9a5b56395d03b3f1f38404eca9054dfc1cbbe3cbd3068651a082ba36a"}
{"level":"info","ts":"2026-07-13T18:04:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/06c6f16b98a4bb1db29ad04b2b1190b2d566d5637f0c9a8175c8d88d974ce85c"}
{"level":"info","ts":"2026-07-13T18:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f1b848081b5fe150ffa06e6c5b3f8f664040fdfa8163021bb69adef2911292c2"}
{"level":"info","ts":"2026-07-13T18:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/45f892f01b42aad235c3dd6e84a80f1a3a4556371f0b4a7a35261469a0c87bbb"}
{"level":"info","ts":"2026-07-13T18:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8cd07051e0dfb3438bdaf681614ed4d21e02b79eb10ef7f8df748d0861d7f866"}
{"level":"info","ts":"2026-07-13T18:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/96852efc678de4fd3ecac40f3cab7bd3d843cffb6adfb831aabbe6c9bd9b31db"}
{"level":"info","ts":"2026-07-13T18:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6861f89e61443c5edae016a118f2263a5a37e31a0abc0acf0986a9e6188f9e54"}
{"level":"info","ts":"2026-07-13T18:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4e2a68523f613aa9b763d72d99ea604c7bf08c487fdf36d7058aea91392567fd"}
{"level":"info","ts":"2026-07-13T18:04:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/29c311638e870490e73e4e5178735dd6a56184297cdc441b428310c183c9dc3c"}
{"level":"debug","ts":"2026-07-13T18:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d38be014d55da933d8de1e720d679ffacfa0fd59713b9fa00bd5fa4a9453c4e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:04:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:04:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d38be014d55da933d8de1e720d679ffacfa0fd59713b9fa00bd5fa4a9453c4e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d38be014d55da933d8de1e720d679ffacfa0fd59713b9fa00bd5fa4a9453c4e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d38be014d55da933d8de1e720d679ffacfa0fd59713b9fa00bd5fa4a9453c4e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d38be014d55da933d8de1e720d679ffacfa0fd59713b9fa00bd5fa4a9453c4e3"}
{"level":"debug","ts":"2026-07-13T18:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d38be014d55da933d8de1e720d679ffacfa0fd59713b9fa00bd5fa4a9453c4e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d38be014d55da933d8de1e720d679ffacfa0fd59713b9fa00bd5fa4a9453c4e3"}
{"level":"debug","ts":"2026-07-13T18:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d38be014d55da933d8de1e720d679ffacfa0fd59713b9fa00bd5fa4a9453c4e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:04:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:04:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d38be014d55da933d8de1e720d679ffacfa0fd59713b9fa00bd5fa4a9453c4e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d38be014d55da933d8de1e720d679ffacfa0fd59713b9fa00bd5fa4a9453c4e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d38be014d55da933d8de1e720d679ffacfa0fd59713b9fa00bd5fa4a9453c4e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d38be014d55da933d8de1e720d679ffacfa0fd59713b9fa00bd5fa4a9453c4e3"}
{"level":"debug","ts":"2026-07-13T18:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0230d1c8b02af858cec125f9d343d7122c92333869f336e8bda886721ab5d4f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:04:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:04:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0230d1c8b02af858cec125f9d343d7122c92333869f336e8bda886721ab5d4f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0230d1c8b02af858cec125f9d343d7122c92333869f336e8bda886721ab5d4f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0230d1c8b02af858cec125f9d343d7122c92333869f336e8bda886721ab5d4f2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0230d1c8b02af858cec125f9d343d7122c92333869f336e8bda886721ab5d4f2"}
{"level":"debug","ts":"2026-07-13T18:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0230d1c8b02af858cec125f9d343d7122c92333869f336e8bda886721ab5d4f2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0230d1c8b02af858cec125f9d343d7122c92333869f336e8bda886721ab5d4f2"}
{"level":"debug","ts":"2026-07-13T18:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0230d1c8b02af858cec125f9d343d7122c92333869f336e8bda886721ab5d4f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:04:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:04:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0230d1c8b02af858cec125f9d343d7122c92333869f336e8bda886721ab5d4f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0230d1c8b02af858cec125f9d343d7122c92333869f336e8bda886721ab5d4f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0230d1c8b02af858cec125f9d343d7122c92333869f336e8bda886721ab5d4f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:04:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:04:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0230d1c8b02af858cec125f9d343d7122c92333869f336e8bda886721ab5d4f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0230d1c8b02af858cec125f9d343d7122c92333869f336e8bda886721ab5d4f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0230d1c8b02af858cec125f9d343d7122c92333869f336e8bda886721ab5d4f2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0230d1c8b02af858cec125f9d343d7122c92333869f336e8bda886721ab5d4f2"}
{"level":"debug","ts":"2026-07-13T18:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0230d1c8b02af858cec125f9d343d7122c92333869f336e8bda886721ab5d4f2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0230d1c8b02af858cec125f9d343d7122c92333869f336e8bda886721ab5d4f2"}
{"level":"debug","ts":"2026-07-13T18:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0230d1c8b02af858cec125f9d343d7122c92333869f336e8bda886721ab5d4f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:04:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:04:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0230d1c8b02af858cec125f9d343d7122c92333869f336e8bda886721ab5d4f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0230d1c8b02af858cec125f9d343d7122c92333869f336e8bda886721ab5d4f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0230d1c8b02af858cec125f9d343d7122c92333869f336e8bda886721ab5d4f2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:04:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0230d1c8b02af858cec125f9d343d7122c92333869f336e8bda886721ab5d4f2"}
{"level":"debug","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4666c13e130e8549b07c33c2acfddca054083d066474da73f5e8cc3959e5e073","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:04:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:04:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4666c13e130e8549b07c33c2acfddca054083d066474da73f5e8cc3959e5e073","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4666c13e130e8549b07c33c2acfddca054083d066474da73f5e8cc3959e5e073","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:04:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:04:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4666c13e130e8549b07c33c2acfddca054083d066474da73f5e8cc3959e5e073"}
{"level":"info","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4666c13e130e8549b07c33c2acfddca054083d066474da73f5e8cc3959e5e073","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4666c13e130e8549b07c33c2acfddca054083d066474da73f5e8cc3959e5e073","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:04:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:04:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4666c13e130e8549b07c33c2acfddca054083d066474da73f5e8cc3959e5e073","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4666c13e130e8549b07c33c2acfddca054083d066474da73f5e8cc3959e5e073\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4666c13e130e8549b07c33c2acfddca054083d066474da73f5e8cc3959e5e073","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4666c13e130e8549b07c33c2acfddca054083d066474da73f5e8cc3959e5e073","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4666c13e130e8549b07c33c2acfddca054083d066474da73f5e8cc3959e5e073"}
{"level":"info","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4666c13e130e8549b07c33c2acfddca054083d066474da73f5e8cc3959e5e073"}
{"level":"debug","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4666c13e130e8549b07c33c2acfddca054083d066474da73f5e8cc3959e5e073","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:04:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:04:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4666c13e130e8549b07c33c2acfddca054083d066474da73f5e8cc3959e5e073"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4666c13e130e8549b07c33c2acfddca054083d066474da73f5e8cc3959e5e073","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4666c13e130e8549b07c33c2acfddca054083d066474da73f5e8cc3959e5e073","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:04:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:04:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4666c13e130e8549b07c33c2acfddca054083d066474da73f5e8cc3959e5e073","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffdf6849543367b3b1bf6b6482b87528d257b9464524fe55610b787e23d48174","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:04:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:04:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4666c13e130e8549b07c33c2acfddca054083d066474da73f5e8cc3959e5e073"}
{"level":"info","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffdf6849543367b3b1bf6b6482b87528d257b9464524fe55610b787e23d48174","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4666c13e130e8549b07c33c2acfddca054083d066474da73f5e8cc3959e5e073","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:04:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:04:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4666c13e130e8549b07c33c2acfddca054083d066474da73f5e8cc3959e5e073"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4666c13e130e8549b07c33c2acfddca054083d066474da73f5e8cc3959e5e073","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffdf6849543367b3b1bf6b6482b87528d257b9464524fe55610b787e23d48174","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:04:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:04:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffdf6849543367b3b1bf6b6482b87528d257b9464524fe55610b787e23d48174"}
{"level":"info","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffdf6849543367b3b1bf6b6482b87528d257b9464524fe55610b787e23d48174","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4666c13e130e8549b07c33c2acfddca054083d066474da73f5e8cc3959e5e073","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:04:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:04:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4666c13e130e8549b07c33c2acfddca054083d066474da73f5e8cc3959e5e073"}
{"level":"info","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4666c13e130e8549b07c33c2acfddca054083d066474da73f5e8cc3959e5e073","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffdf6849543367b3b1bf6b6482b87528d257b9464524fe55610b787e23d48174","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4666c13e130e8549b07c33c2acfddca054083d066474da73f5e8cc3959e5e073","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:04:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:04:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4666c13e130e8549b07c33c2acfddca054083d066474da73f5e8cc3959e5e073"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4666c13e130e8549b07c33c2acfddca054083d066474da73f5e8cc3959e5e073","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4666c13e130e8549b07c33c2acfddca054083d066474da73f5e8cc3959e5e073","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:04:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:04:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4666c13e130e8549b07c33c2acfddca054083d066474da73f5e8cc3959e5e073"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffdf6849543367b3b1bf6b6482b87528d257b9464524fe55610b787e23d48174"}
{"level":"error","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4666c13e130e8549b07c33c2acfddca054083d066474da73f5e8cc3959e5e073","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4666c13e130e8549b07c33c2acfddca054083d066474da73f5e8cc3959e5e073\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffdf6849543367b3b1bf6b6482b87528d257b9464524fe55610b787e23d48174","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:04:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:04:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffdf6849543367b3b1bf6b6482b87528d257b9464524fe55610b787e23d48174"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffdf6849543367b3b1bf6b6482b87528d257b9464524fe55610b787e23d48174","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4666c13e130e8549b07c33c2acfddca054083d066474da73f5e8cc3959e5e073","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:04:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:04:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4666c13e130e8549b07c33c2acfddca054083d066474da73f5e8cc3959e5e073","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"233cb23a364a9f59a38444cdac59b37ee04d61926937d9474b310274d1d8a384","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:04:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:04:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4666c13e130e8549b07c33c2acfddca054083d066474da73f5e8cc3959e5e073"}
{"level":"info","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"233cb23a364a9f59a38444cdac59b37ee04d61926937d9474b310274d1d8a384","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffdf6849543367b3b1bf6b6482b87528d257b9464524fe55610b787e23d48174","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4666c13e130e8549b07c33c2acfddca054083d066474da73f5e8cc3959e5e073","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:04:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:04:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4666c13e130e8549b07c33c2acfddca054083d066474da73f5e8cc3959e5e073"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4666c13e130e8549b07c33c2acfddca054083d066474da73f5e8cc3959e5e073","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"233cb23a364a9f59a38444cdac59b37ee04d61926937d9474b310274d1d8a384","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:04:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:04:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"233cb23a364a9f59a38444cdac59b37ee04d61926937d9474b310274d1d8a384","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4666c13e130e8549b07c33c2acfddca054083d066474da73f5e8cc3959e5e073","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"233cb23a364a9f59a38444cdac59b37ee04d61926937d9474b310274d1d8a384","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/233cb23a364a9f59a38444cdac59b37ee04d61926937d9474b310274d1d8a384"}
{"level":"debug","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"233cb23a364a9f59a38444cdac59b37ee04d61926937d9474b310274d1d8a384","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:04:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:04:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["233cb23a364a9f59a38444cdac59b37ee04d61926937d9474b310274d1d8a384"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"233cb23a364a9f59a38444cdac59b37ee04d61926937d9474b310274d1d8a384","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"144bc37ff14ec1d8ad57cc20a1ac9b732d94cb0a896c297067205f1137acb555","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:04:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:04:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffdf6849543367b3b1bf6b6482b87528d257b9464524fe55610b787e23d48174"}
{"level":"info","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"144bc37ff14ec1d8ad57cc20a1ac9b732d94cb0a896c297067205f1137acb555","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"233cb23a364a9f59a38444cdac59b37ee04d61926937d9474b310274d1d8a384","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"144bc37ff14ec1d8ad57cc20a1ac9b732d94cb0a896c297067205f1137acb555","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"144bc37ff14ec1d8ad57cc20a1ac9b732d94cb0a896c297067205f1137acb555","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4666c13e130e8549b07c33c2acfddca054083d066474da73f5e8cc3959e5e073"}
{"level":"debug","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"144bc37ff14ec1d8ad57cc20a1ac9b732d94cb0a896c297067205f1137acb555","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/233cb23a364a9f59a38444cdac59b37ee04d61926937d9474b310274d1d8a384"}
{"level":"info","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/144bc37ff14ec1d8ad57cc20a1ac9b732d94cb0a896c297067205f1137acb555"}
{"level":"debug","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"144bc37ff14ec1d8ad57cc20a1ac9b732d94cb0a896c297067205f1137acb555","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:04:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:04:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["144bc37ff14ec1d8ad57cc20a1ac9b732d94cb0a896c297067205f1137acb555"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"144bc37ff14ec1d8ad57cc20a1ac9b732d94cb0a896c297067205f1137acb555","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64c5a3d08a412815e0ab3bbf9fd8138ae693a7f551e0291d2ebd8d177558f87a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:04:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:04:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64c5a3d08a412815e0ab3bbf9fd8138ae693a7f551e0291d2ebd8d177558f87a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"144bc37ff14ec1d8ad57cc20a1ac9b732d94cb0a896c297067205f1137acb555","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64c5a3d08a412815e0ab3bbf9fd8138ae693a7f551e0291d2ebd8d177558f87a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64c5a3d08a412815e0ab3bbf9fd8138ae693a7f551e0291d2ebd8d177558f87a"}
{"level":"debug","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64c5a3d08a412815e0ab3bbf9fd8138ae693a7f551e0291d2ebd8d177558f87a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:04:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:04:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64c5a3d08a412815e0ab3bbf9fd8138ae693a7f551e0291d2ebd8d177558f87a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64c5a3d08a412815e0ab3bbf9fd8138ae693a7f551e0291d2ebd8d177558f87a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64c5a3d08a412815e0ab3bbf9fd8138ae693a7f551e0291d2ebd8d177558f87a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/144bc37ff14ec1d8ad57cc20a1ac9b732d94cb0a896c297067205f1137acb555"}
{"level":"info","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64c5a3d08a412815e0ab3bbf9fd8138ae693a7f551e0291d2ebd8d177558f87a"}
{"level":"debug","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e0039bee7f399d6e54e866059274d9890d3d8de1d0c932cd46e5c75f8afd09f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:04:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:04:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e0039bee7f399d6e54e866059274d9890d3d8de1d0c932cd46e5c75f8afd09f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e0039bee7f399d6e54e866059274d9890d3d8de1d0c932cd46e5c75f8afd09f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e0039bee7f399d6e54e866059274d9890d3d8de1d0c932cd46e5c75f8afd09f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e0039bee7f399d6e54e866059274d9890d3d8de1d0c932cd46e5c75f8afd09f"}
{"level":"debug","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e0039bee7f399d6e54e866059274d9890d3d8de1d0c932cd46e5c75f8afd09f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e0039bee7f399d6e54e866059274d9890d3d8de1d0c932cd46e5c75f8afd09f"}
{"level":"debug","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e0039bee7f399d6e54e866059274d9890d3d8de1d0c932cd46e5c75f8afd09f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:04:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:04:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e0039bee7f399d6e54e866059274d9890d3d8de1d0c932cd46e5c75f8afd09f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e0039bee7f399d6e54e866059274d9890d3d8de1d0c932cd46e5c75f8afd09f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e0039bee7f399d6e54e866059274d9890d3d8de1d0c932cd46e5c75f8afd09f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:04:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e0039bee7f399d6e54e866059274d9890d3d8de1d0c932cd46e5c75f8afd09f"}
{"level":"debug","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a312484d2c0113f58a7a2dc9766f47811350316d54468bd1fa6446b60c71b816","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:05:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:05:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a312484d2c0113f58a7a2dc9766f47811350316d54468bd1fa6446b60c71b816"}
{"level":"info","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a312484d2c0113f58a7a2dc9766f47811350316d54468bd1fa6446b60c71b816","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a312484d2c0113f58a7a2dc9766f47811350316d54468bd1fa6446b60c71b816","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:05:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:05:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a312484d2c0113f58a7a2dc9766f47811350316d54468bd1fa6446b60c71b816"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a312484d2c0113f58a7a2dc9766f47811350316d54468bd1fa6446b60c71b816"}
{"level":"error","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a312484d2c0113f58a7a2dc9766f47811350316d54468bd1fa6446b60c71b816","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a312484d2c0113f58a7a2dc9766f47811350316d54468bd1fa6446b60c71b816\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a312484d2c0113f58a7a2dc9766f47811350316d54468bd1fa6446b60c71b816","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:05:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:05:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a312484d2c0113f58a7a2dc9766f47811350316d54468bd1fa6446b60c71b816"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a312484d2c0113f58a7a2dc9766f47811350316d54468bd1fa6446b60c71b816","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a312484d2c0113f58a7a2dc9766f47811350316d54468bd1fa6446b60c71b816","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:05:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:05:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a312484d2c0113f58a7a2dc9766f47811350316d54468bd1fa6446b60c71b816"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a312484d2c0113f58a7a2dc9766f47811350316d54468bd1fa6446b60c71b816"}
{"level":"error","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a312484d2c0113f58a7a2dc9766f47811350316d54468bd1fa6446b60c71b816","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a312484d2c0113f58a7a2dc9766f47811350316d54468bd1fa6446b60c71b816\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a312484d2c0113f58a7a2dc9766f47811350316d54468bd1fa6446b60c71b816","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a312484d2c0113f58a7a2dc9766f47811350316d54468bd1fa6446b60c71b816","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d9b1dd24fc61ff627d4c4f7b2aaba4fcca3385afe298e02ee8952be64a1648b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:05:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:05:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d9b1dd24fc61ff627d4c4f7b2aaba4fcca3385afe298e02ee8952be64a1648b"}
{"level":"info","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d9b1dd24fc61ff627d4c4f7b2aaba4fcca3385afe298e02ee8952be64a1648b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d9b1dd24fc61ff627d4c4f7b2aaba4fcca3385afe298e02ee8952be64a1648b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:05:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:05:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d9b1dd24fc61ff627d4c4f7b2aaba4fcca3385afe298e02ee8952be64a1648b"}
{"level":"info","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d9b1dd24fc61ff627d4c4f7b2aaba4fcca3385afe298e02ee8952be64a1648b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d9b1dd24fc61ff627d4c4f7b2aaba4fcca3385afe298e02ee8952be64a1648b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:05:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:05:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d9b1dd24fc61ff627d4c4f7b2aaba4fcca3385afe298e02ee8952be64a1648b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1d9b1dd24fc61ff627d4c4f7b2aaba4fcca3385afe298e02ee8952be64a1648b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1d9b1dd24fc61ff627d4c4f7b2aaba4fcca3385afe298e02ee8952be64a1648b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d9b1dd24fc61ff627d4c4f7b2aaba4fcca3385afe298e02ee8952be64a1648b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d9b1dd24fc61ff627d4c4f7b2aaba4fcca3385afe298e02ee8952be64a1648b"}
{"level":"debug","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d9b1dd24fc61ff627d4c4f7b2aaba4fcca3385afe298e02ee8952be64a1648b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:05:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:05:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d9b1dd24fc61ff627d4c4f7b2aaba4fcca3385afe298e02ee8952be64a1648b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d9b1dd24fc61ff627d4c4f7b2aaba4fcca3385afe298e02ee8952be64a1648b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d9b1dd24fc61ff627d4c4f7b2aaba4fcca3385afe298e02ee8952be64a1648b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d9b1dd24fc61ff627d4c4f7b2aaba4fcca3385afe298e02ee8952be64a1648b"}
{"level":"debug","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a5deb208bd88ff81a5fc901be7103cf9c7e8190b2537881bf0d8abd434d997d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:05:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:05:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a5deb208bd88ff81a5fc901be7103cf9c7e8190b2537881bf0d8abd434d997d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a5deb208bd88ff81a5fc901be7103cf9c7e8190b2537881bf0d8abd434d997d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a5deb208bd88ff81a5fc901be7103cf9c7e8190b2537881bf0d8abd434d997d"}
{"level":"debug","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a5deb208bd88ff81a5fc901be7103cf9c7e8190b2537881bf0d8abd434d997d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a5deb208bd88ff81a5fc901be7103cf9c7e8190b2537881bf0d8abd434d997d"}
{"level":"debug","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a5deb208bd88ff81a5fc901be7103cf9c7e8190b2537881bf0d8abd434d997d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:05:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:05:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a5deb208bd88ff81a5fc901be7103cf9c7e8190b2537881bf0d8abd434d997d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a5deb208bd88ff81a5fc901be7103cf9c7e8190b2537881bf0d8abd434d997d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a5deb208bd88ff81a5fc901be7103cf9c7e8190b2537881bf0d8abd434d997d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:05:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:05:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a5deb208bd88ff81a5fc901be7103cf9c7e8190b2537881bf0d8abd434d997d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a5deb208bd88ff81a5fc901be7103cf9c7e8190b2537881bf0d8abd434d997d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a5deb208bd88ff81a5fc901be7103cf9c7e8190b2537881bf0d8abd434d997d"}
{"level":"debug","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a5deb208bd88ff81a5fc901be7103cf9c7e8190b2537881bf0d8abd434d997d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6c523b6e9f203e167d7d0e35905b5644de824b567704890f0586fd11248525f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:05:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:05:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a5deb208bd88ff81a5fc901be7103cf9c7e8190b2537881bf0d8abd434d997d"}
{"level":"info","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6c523b6e9f203e167d7d0e35905b5644de824b567704890f0586fd11248525f"}
{"level":"info","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6c523b6e9f203e167d7d0e35905b5644de824b567704890f0586fd11248525f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a5deb208bd88ff81a5fc901be7103cf9c7e8190b2537881bf0d8abd434d997d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:05:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:05:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a5deb208bd88ff81a5fc901be7103cf9c7e8190b2537881bf0d8abd434d997d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a5deb208bd88ff81a5fc901be7103cf9c7e8190b2537881bf0d8abd434d997d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6c523b6e9f203e167d7d0e35905b5644de824b567704890f0586fd11248525f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:05:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:05:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6c523b6e9f203e167d7d0e35905b5644de824b567704890f0586fd11248525f"}
{"level":"info","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6c523b6e9f203e167d7d0e35905b5644de824b567704890f0586fd11248525f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a5deb208bd88ff81a5fc901be7103cf9c7e8190b2537881bf0d8abd434d997d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:05:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:05:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a5deb208bd88ff81a5fc901be7103cf9c7e8190b2537881bf0d8abd434d997d"}
{"level":"info","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a5deb208bd88ff81a5fc901be7103cf9c7e8190b2537881bf0d8abd434d997d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6c523b6e9f203e167d7d0e35905b5644de824b567704890f0586fd11248525f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a5deb208bd88ff81a5fc901be7103cf9c7e8190b2537881bf0d8abd434d997d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:05:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:05:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a5deb208bd88ff81a5fc901be7103cf9c7e8190b2537881bf0d8abd434d997d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6c523b6e9f203e167d7d0e35905b5644de824b567704890f0586fd11248525f"}
{"level":"info","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a5deb208bd88ff81a5fc901be7103cf9c7e8190b2537881bf0d8abd434d997d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6c523b6e9f203e167d7d0e35905b5644de824b567704890f0586fd11248525f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:05:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:05:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6c523b6e9f203e167d7d0e35905b5644de824b567704890f0586fd11248525f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a5deb208bd88ff81a5fc901be7103cf9c7e8190b2537881bf0d8abd434d997d"}
{"level":"info","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6c523b6e9f203e167d7d0e35905b5644de824b567704890f0586fd11248525f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e86fc11ba6f21f16ce853adbbd43823cad0017e122e5b41e41826d3381e30cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:05:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:05:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e86fc11ba6f21f16ce853adbbd43823cad0017e122e5b41e41826d3381e30cd"}
{"level":"info","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e86fc11ba6f21f16ce853adbbd43823cad0017e122e5b41e41826d3381e30cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a5deb208bd88ff81a5fc901be7103cf9c7e8190b2537881bf0d8abd434d997d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:05:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:05:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a5deb208bd88ff81a5fc901be7103cf9c7e8190b2537881bf0d8abd434d997d"}
{"level":"info","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a5deb208bd88ff81a5fc901be7103cf9c7e8190b2537881bf0d8abd434d997d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6c523b6e9f203e167d7d0e35905b5644de824b567704890f0586fd11248525f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:05:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:05:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6c523b6e9f203e167d7d0e35905b5644de824b567704890f0586fd11248525f"}
{"level":"info","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6c523b6e9f203e167d7d0e35905b5644de824b567704890f0586fd11248525f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e86fc11ba6f21f16ce853adbbd43823cad0017e122e5b41e41826d3381e30cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a5deb208bd88ff81a5fc901be7103cf9c7e8190b2537881bf0d8abd434d997d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:05:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:05:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a5deb208bd88ff81a5fc901be7103cf9c7e8190b2537881bf0d8abd434d997d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e86fc11ba6f21f16ce853adbbd43823cad0017e122e5b41e41826d3381e30cd"}
{"level":"info","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a5deb208bd88ff81a5fc901be7103cf9c7e8190b2537881bf0d8abd434d997d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6c523b6e9f203e167d7d0e35905b5644de824b567704890f0586fd11248525f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:05:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:05:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6c523b6e9f203e167d7d0e35905b5644de824b567704890f0586fd11248525f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a5deb208bd88ff81a5fc901be7103cf9c7e8190b2537881bf0d8abd434d997d"}
{"level":"info","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6c523b6e9f203e167d7d0e35905b5644de824b567704890f0586fd11248525f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6622c04012e3044ea2493b76da100c6cc98e7a10fccfd686bce9509ce469415f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:05:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:05:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6c523b6e9f203e167d7d0e35905b5644de824b567704890f0586fd11248525f"}
{"level":"info","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6622c04012e3044ea2493b76da100c6cc98e7a10fccfd686bce9509ce469415f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e86fc11ba6f21f16ce853adbbd43823cad0017e122e5b41e41826d3381e30cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:05:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:05:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e86fc11ba6f21f16ce853adbbd43823cad0017e122e5b41e41826d3381e30cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6622c04012e3044ea2493b76da100c6cc98e7a10fccfd686bce9509ce469415f"}
{"level":"info","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e86fc11ba6f21f16ce853adbbd43823cad0017e122e5b41e41826d3381e30cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a5deb208bd88ff81a5fc901be7103cf9c7e8190b2537881bf0d8abd434d997d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:05:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:05:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a5deb208bd88ff81a5fc901be7103cf9c7e8190b2537881bf0d8abd434d997d"}
{"level":"info","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a5deb208bd88ff81a5fc901be7103cf9c7e8190b2537881bf0d8abd434d997d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6c523b6e9f203e167d7d0e35905b5644de824b567704890f0586fd11248525f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:05:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:05:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6c523b6e9f203e167d7d0e35905b5644de824b567704890f0586fd11248525f"}
{"level":"info","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6c523b6e9f203e167d7d0e35905b5644de824b567704890f0586fd11248525f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6622c04012e3044ea2493b76da100c6cc98e7a10fccfd686bce9509ce469415f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:05:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:05:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6622c04012e3044ea2493b76da100c6cc98e7a10fccfd686bce9509ce469415f"}
{"level":"info","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6622c04012e3044ea2493b76da100c6cc98e7a10fccfd686bce9509ce469415f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e86fc11ba6f21f16ce853adbbd43823cad0017e122e5b41e41826d3381e30cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:05:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:05:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e86fc11ba6f21f16ce853adbbd43823cad0017e122e5b41e41826d3381e30cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce292a294ed84ea665e728471744d1e0bfbe02a54baa171396ddba8fb1257895","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:05:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:05:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e86fc11ba6f21f16ce853adbbd43823cad0017e122e5b41e41826d3381e30cd"}
{"level":"info","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce292a294ed84ea665e728471744d1e0bfbe02a54baa171396ddba8fb1257895","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a5deb208bd88ff81a5fc901be7103cf9c7e8190b2537881bf0d8abd434d997d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:05:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:05:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a5deb208bd88ff81a5fc901be7103cf9c7e8190b2537881bf0d8abd434d997d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce292a294ed84ea665e728471744d1e0bfbe02a54baa171396ddba8fb1257895"}
{"level":"info","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a5deb208bd88ff81a5fc901be7103cf9c7e8190b2537881bf0d8abd434d997d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6c523b6e9f203e167d7d0e35905b5644de824b567704890f0586fd11248525f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:05:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:05:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6c523b6e9f203e167d7d0e35905b5644de824b567704890f0586fd11248525f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6c523b6e9f203e167d7d0e35905b5644de824b567704890f0586fd11248525f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6622c04012e3044ea2493b76da100c6cc98e7a10fccfd686bce9509ce469415f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:05:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:05:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6622c04012e3044ea2493b76da100c6cc98e7a10fccfd686bce9509ce469415f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a5deb208bd88ff81a5fc901be7103cf9c7e8190b2537881bf0d8abd434d997d"}
{"level":"info","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6622c04012e3044ea2493b76da100c6cc98e7a10fccfd686bce9509ce469415f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e86fc11ba6f21f16ce853adbbd43823cad0017e122e5b41e41826d3381e30cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:05:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:05:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e86fc11ba6f21f16ce853adbbd43823cad0017e122e5b41e41826d3381e30cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6c523b6e9f203e167d7d0e35905b5644de824b567704890f0586fd11248525f"}
{"level":"info","ts":"2026-07-13T18:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e86fc11ba6f21f16ce853adbbd43823cad0017e122e5b41e41826d3381e30cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce292a294ed84ea665e728471744d1e0bfbe02a54baa171396ddba8fb1257895","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:05:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:05:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce292a294ed84ea665e728471744d1e0bfbe02a54baa171396ddba8fb1257895"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6622c04012e3044ea2493b76da100c6cc98e7a10fccfd686bce9509ce469415f"}
{"level":"info","ts":"2026-07-13T18:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce292a294ed84ea665e728471744d1e0bfbe02a54baa171396ddba8fb1257895","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a5deb208bd88ff81a5fc901be7103cf9c7e8190b2537881bf0d8abd434d997d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6c523b6e9f203e167d7d0e35905b5644de824b567704890f0586fd11248525f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6622c04012e3044ea2493b76da100c6cc98e7a10fccfd686bce9509ce469415f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e86fc11ba6f21f16ce853adbbd43823cad0017e122e5b41e41826d3381e30cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:05:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:05:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e86fc11ba6f21f16ce853adbbd43823cad0017e122e5b41e41826d3381e30cd"}
{"level":"info","ts":"2026-07-13T18:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e86fc11ba6f21f16ce853adbbd43823cad0017e122e5b41e41826d3381e30cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce292a294ed84ea665e728471744d1e0bfbe02a54baa171396ddba8fb1257895","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:05:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:05:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce292a294ed84ea665e728471744d1e0bfbe02a54baa171396ddba8fb1257895"}
{"level":"info","ts":"2026-07-13T18:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce292a294ed84ea665e728471744d1e0bfbe02a54baa171396ddba8fb1257895","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11f805719a5fd016ab77bf665035c8b3e57161270ec531912dd385a381ff141b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:05:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:05:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a5deb208bd88ff81a5fc901be7103cf9c7e8190b2537881bf0d8abd434d997d"}
{"level":"info","ts":"2026-07-13T18:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11f805719a5fd016ab77bf665035c8b3e57161270ec531912dd385a381ff141b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e86fc11ba6f21f16ce853adbbd43823cad0017e122e5b41e41826d3381e30cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:05:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:05:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e86fc11ba6f21f16ce853adbbd43823cad0017e122e5b41e41826d3381e30cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11f805719a5fd016ab77bf665035c8b3e57161270ec531912dd385a381ff141b"}
{"level":"info","ts":"2026-07-13T18:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e86fc11ba6f21f16ce853adbbd43823cad0017e122e5b41e41826d3381e30cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce292a294ed84ea665e728471744d1e0bfbe02a54baa171396ddba8fb1257895","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:05:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:05:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce292a294ed84ea665e728471744d1e0bfbe02a54baa171396ddba8fb1257895"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e86fc11ba6f21f16ce853adbbd43823cad0017e122e5b41e41826d3381e30cd"}
{"level":"info","ts":"2026-07-13T18:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce292a294ed84ea665e728471744d1e0bfbe02a54baa171396ddba8fb1257895","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11f805719a5fd016ab77bf665035c8b3e57161270ec531912dd385a381ff141b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:05:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:05:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11f805719a5fd016ab77bf665035c8b3e57161270ec531912dd385a381ff141b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce292a294ed84ea665e728471744d1e0bfbe02a54baa171396ddba8fb1257895"}
{"level":"info","ts":"2026-07-13T18:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11f805719a5fd016ab77bf665035c8b3e57161270ec531912dd385a381ff141b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e86fc11ba6f21f16ce853adbbd43823cad0017e122e5b41e41826d3381e30cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce292a294ed84ea665e728471744d1e0bfbe02a54baa171396ddba8fb1257895","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11f805719a5fd016ab77bf665035c8b3e57161270ec531912dd385a381ff141b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:05:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:05:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11f805719a5fd016ab77bf665035c8b3e57161270ec531912dd385a381ff141b"}
{"level":"info","ts":"2026-07-13T18:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11f805719a5fd016ab77bf665035c8b3e57161270ec531912dd385a381ff141b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11f805719a5fd016ab77bf665035c8b3e57161270ec531912dd385a381ff141b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:05:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:05:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11f805719a5fd016ab77bf665035c8b3e57161270ec531912dd385a381ff141b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e86fc11ba6f21f16ce853adbbd43823cad0017e122e5b41e41826d3381e30cd"}
{"level":"info","ts":"2026-07-13T18:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11f805719a5fd016ab77bf665035c8b3e57161270ec531912dd385a381ff141b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11f805719a5fd016ab77bf665035c8b3e57161270ec531912dd385a381ff141b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:05:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:05:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11f805719a5fd016ab77bf665035c8b3e57161270ec531912dd385a381ff141b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-13T18:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"11f805719a5fd016ab77bf665035c8b3e57161270ec531912dd385a381ff141b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"11f805719a5fd016ab77bf665035c8b3e57161270ec531912dd385a381ff141b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T18:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11f805719a5fd016ab77bf665035c8b3e57161270ec531912dd385a381ff141b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11f805719a5fd016ab77bf665035c8b3e57161270ec531912dd385a381ff141b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce292a294ed84ea665e728471744d1e0bfbe02a54baa171396ddba8fb1257895"}
{"level":"info","ts":"2026-07-13T18:05:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11f805719a5fd016ab77bf665035c8b3e57161270ec531912dd385a381ff141b"}
{"level":"debug","ts":"2026-07-13T18:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"144bc37ff14ec1d8ad57cc20a1ac9b732d94cb0a896c297067205f1137acb555","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:05:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:05:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"144bc37ff14ec1d8ad57cc20a1ac9b732d94cb0a896c297067205f1137acb555","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"144bc37ff14ec1d8ad57cc20a1ac9b732d94cb0a896c297067205f1137acb555","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"144bc37ff14ec1d8ad57cc20a1ac9b732d94cb0a896c297067205f1137acb555","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/144bc37ff14ec1d8ad57cc20a1ac9b732d94cb0a896c297067205f1137acb555"}
{"level":"debug","ts":"2026-07-13T18:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"144bc37ff14ec1d8ad57cc20a1ac9b732d94cb0a896c297067205f1137acb555","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/144bc37ff14ec1d8ad57cc20a1ac9b732d94cb0a896c297067205f1137acb555"}
{"level":"debug","ts":"2026-07-13T18:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"144bc37ff14ec1d8ad57cc20a1ac9b732d94cb0a896c297067205f1137acb555","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:05:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:05:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["144bc37ff14ec1d8ad57cc20a1ac9b732d94cb0a896c297067205f1137acb555"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"144bc37ff14ec1d8ad57cc20a1ac9b732d94cb0a896c297067205f1137acb555","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"144bc37ff14ec1d8ad57cc20a1ac9b732d94cb0a896c297067205f1137acb555","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/144bc37ff14ec1d8ad57cc20a1ac9b732d94cb0a896c297067205f1137acb555"}
{"level":"debug","ts":"2026-07-13T18:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64c5a3d08a412815e0ab3bbf9fd8138ae693a7f551e0291d2ebd8d177558f87a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:05:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:05:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64c5a3d08a412815e0ab3bbf9fd8138ae693a7f551e0291d2ebd8d177558f87a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64c5a3d08a412815e0ab3bbf9fd8138ae693a7f551e0291d2ebd8d177558f87a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64c5a3d08a412815e0ab3bbf9fd8138ae693a7f551e0291d2ebd8d177558f87a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64c5a3d08a412815e0ab3bbf9fd8138ae693a7f551e0291d2ebd8d177558f87a"}
{"level":"debug","ts":"2026-07-13T18:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64c5a3d08a412815e0ab3bbf9fd8138ae693a7f551e0291d2ebd8d177558f87a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64c5a3d08a412815e0ab3bbf9fd8138ae693a7f551e0291d2ebd8d177558f87a"}
{"level":"debug","ts":"2026-07-13T18:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64c5a3d08a412815e0ab3bbf9fd8138ae693a7f551e0291d2ebd8d177558f87a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:05:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:05:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64c5a3d08a412815e0ab3bbf9fd8138ae693a7f551e0291d2ebd8d177558f87a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64c5a3d08a412815e0ab3bbf9fd8138ae693a7f551e0291d2ebd8d177558f87a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64c5a3d08a412815e0ab3bbf9fd8138ae693a7f551e0291d2ebd8d177558f87a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:05:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:05:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64c5a3d08a412815e0ab3bbf9fd8138ae693a7f551e0291d2ebd8d177558f87a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64c5a3d08a412815e0ab3bbf9fd8138ae693a7f551e0291d2ebd8d177558f87a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64c5a3d08a412815e0ab3bbf9fd8138ae693a7f551e0291d2ebd8d177558f87a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64c5a3d08a412815e0ab3bbf9fd8138ae693a7f551e0291d2ebd8d177558f87a"}
{"level":"debug","ts":"2026-07-13T18:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64c5a3d08a412815e0ab3bbf9fd8138ae693a7f551e0291d2ebd8d177558f87a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:05:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64c5a3d08a412815e0ab3bbf9fd8138ae693a7f551e0291d2ebd8d177558f87a"}
{"level":"debug","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64c5a3d08a412815e0ab3bbf9fd8138ae693a7f551e0291d2ebd8d177558f87a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:05:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:05:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64c5a3d08a412815e0ab3bbf9fd8138ae693a7f551e0291d2ebd8d177558f87a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64c5a3d08a412815e0ab3bbf9fd8138ae693a7f551e0291d2ebd8d177558f87a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64c5a3d08a412815e0ab3bbf9fd8138ae693a7f551e0291d2ebd8d177558f87a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a2965aef3b7c2070a147b46e8814f5e0947cdbd04f47e55191ef4931e36aa19","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64c5a3d08a412815e0ab3bbf9fd8138ae693a7f551e0291d2ebd8d177558f87a"}
{"level":"info","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a2965aef3b7c2070a147b46e8814f5e0947cdbd04f47e55191ef4931e36aa19"}
{"level":"debug","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a312484d2c0113f58a7a2dc9766f47811350316d54468bd1fa6446b60c71b816","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:05:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:05:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a312484d2c0113f58a7a2dc9766f47811350316d54468bd1fa6446b60c71b816","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a312484d2c0113f58a7a2dc9766f47811350316d54468bd1fa6446b60c71b816","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a312484d2c0113f58a7a2dc9766f47811350316d54468bd1fa6446b60c71b816","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a312484d2c0113f58a7a2dc9766f47811350316d54468bd1fa6446b60c71b816"}
{"level":"debug","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a312484d2c0113f58a7a2dc9766f47811350316d54468bd1fa6446b60c71b816","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a312484d2c0113f58a7a2dc9766f47811350316d54468bd1fa6446b60c71b816"}
{"level":"debug","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a312484d2c0113f58a7a2dc9766f47811350316d54468bd1fa6446b60c71b816","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:05:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:05:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a312484d2c0113f58a7a2dc9766f47811350316d54468bd1fa6446b60c71b816"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a312484d2c0113f58a7a2dc9766f47811350316d54468bd1fa6446b60c71b816","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a312484d2c0113f58a7a2dc9766f47811350316d54468bd1fa6446b60c71b816","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:05:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:05:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a312484d2c0113f58a7a2dc9766f47811350316d54468bd1fa6446b60c71b816","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d9b1dd24fc61ff627d4c4f7b2aaba4fcca3385afe298e02ee8952be64a1648b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a312484d2c0113f58a7a2dc9766f47811350316d54468bd1fa6446b60c71b816","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a312484d2c0113f58a7a2dc9766f47811350316d54468bd1fa6446b60c71b816","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a312484d2c0113f58a7a2dc9766f47811350316d54468bd1fa6446b60c71b816"}
{"level":"debug","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a312484d2c0113f58a7a2dc9766f47811350316d54468bd1fa6446b60c71b816","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:05:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:05:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a312484d2c0113f58a7a2dc9766f47811350316d54468bd1fa6446b60c71b816"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d9b1dd24fc61ff627d4c4f7b2aaba4fcca3385afe298e02ee8952be64a1648b"}
{"level":"info","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a312484d2c0113f58a7a2dc9766f47811350316d54468bd1fa6446b60c71b816","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a312484d2c0113f58a7a2dc9766f47811350316d54468bd1fa6446b60c71b816","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:05:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:05:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a312484d2c0113f58a7a2dc9766f47811350316d54468bd1fa6446b60c71b816"}
{"level":"info","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a312484d2c0113f58a7a2dc9766f47811350316d54468bd1fa6446b60c71b816","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a312484d2c0113f58a7a2dc9766f47811350316d54468bd1fa6446b60c71b816","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a312484d2c0113f58a7a2dc9766f47811350316d54468bd1fa6446b60c71b816","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a312484d2c0113f58a7a2dc9766f47811350316d54468bd1fa6446b60c71b816"}
{"level":"debug","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a312484d2c0113f58a7a2dc9766f47811350316d54468bd1fa6446b60c71b816","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a312484d2c0113f58a7a2dc9766f47811350316d54468bd1fa6446b60c71b816"}
{"level":"debug","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a312484d2c0113f58a7a2dc9766f47811350316d54468bd1fa6446b60c71b816","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:05:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:05:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a312484d2c0113f58a7a2dc9766f47811350316d54468bd1fa6446b60c71b816"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a312484d2c0113f58a7a2dc9766f47811350316d54468bd1fa6446b60c71b816","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a312484d2c0113f58a7a2dc9766f47811350316d54468bd1fa6446b60c71b816","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:05:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:05:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a312484d2c0113f58a7a2dc9766f47811350316d54468bd1fa6446b60c71b816","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a312484d2c0113f58a7a2dc9766f47811350316d54468bd1fa6446b60c71b816","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a312484d2c0113f58a7a2dc9766f47811350316d54468bd1fa6446b60c71b816","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a312484d2c0113f58a7a2dc9766f47811350316d54468bd1fa6446b60c71b816"}
{"level":"debug","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a312484d2c0113f58a7a2dc9766f47811350316d54468bd1fa6446b60c71b816","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a312484d2c0113f58a7a2dc9766f47811350316d54468bd1fa6446b60c71b816"}
{"level":"debug","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6c523b6e9f203e167d7d0e35905b5644de824b567704890f0586fd11248525f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:05:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:05:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6c523b6e9f203e167d7d0e35905b5644de824b567704890f0586fd11248525f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6c523b6e9f203e167d7d0e35905b5644de824b567704890f0586fd11248525f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6c523b6e9f203e167d7d0e35905b5644de824b567704890f0586fd11248525f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6c523b6e9f203e167d7d0e35905b5644de824b567704890f0586fd11248525f"}
{"level":"debug","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a312484d2c0113f58a7a2dc9766f47811350316d54468bd1fa6446b60c71b816","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:05:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:05:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a312484d2c0113f58a7a2dc9766f47811350316d54468bd1fa6446b60c71b816"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6c523b6e9f203e167d7d0e35905b5644de824b567704890f0586fd11248525f"}
{"level":"info","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a312484d2c0113f58a7a2dc9766f47811350316d54468bd1fa6446b60c71b816","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6c523b6e9f203e167d7d0e35905b5644de824b567704890f0586fd11248525f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:05:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:05:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6c523b6e9f203e167d7d0e35905b5644de824b567704890f0586fd11248525f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6c523b6e9f203e167d7d0e35905b5644de824b567704890f0586fd11248525f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a312484d2c0113f58a7a2dc9766f47811350316d54468bd1fa6446b60c71b816","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:05:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:05:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a312484d2c0113f58a7a2dc9766f47811350316d54468bd1fa6446b60c71b816"}
{"level":"info","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a312484d2c0113f58a7a2dc9766f47811350316d54468bd1fa6446b60c71b816","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6c523b6e9f203e167d7d0e35905b5644de824b567704890f0586fd11248525f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:05:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:05:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6c523b6e9f203e167d7d0e35905b5644de824b567704890f0586fd11248525f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a312484d2c0113f58a7a2dc9766f47811350316d54468bd1fa6446b60c71b816","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:05:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:05:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a312484d2c0113f58a7a2dc9766f47811350316d54468bd1fa6446b60c71b816"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6c523b6e9f203e167d7d0e35905b5644de824b567704890f0586fd11248525f"}
{"level":"info","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a312484d2c0113f58a7a2dc9766f47811350316d54468bd1fa6446b60c71b816","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6c523b6e9f203e167d7d0e35905b5644de824b567704890f0586fd11248525f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:05:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:05:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6c523b6e9f203e167d7d0e35905b5644de824b567704890f0586fd11248525f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a312484d2c0113f58a7a2dc9766f47811350316d54468bd1fa6446b60c71b816"}
{"level":"info","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6c523b6e9f203e167d7d0e35905b5644de824b567704890f0586fd11248525f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a312484d2c0113f58a7a2dc9766f47811350316d54468bd1fa6446b60c71b816","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6c523b6e9f203e167d7d0e35905b5644de824b567704890f0586fd11248525f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:05:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:05:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6c523b6e9f203e167d7d0e35905b5644de824b567704890f0586fd11248525f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6c523b6e9f203e167d7d0e35905b5644de824b567704890f0586fd11248525f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6c523b6e9f203e167d7d0e35905b5644de824b567704890f0586fd11248525f"}
{"level":"debug","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6c523b6e9f203e167d7d0e35905b5644de824b567704890f0586fd11248525f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:05:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:05:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6c523b6e9f203e167d7d0e35905b5644de824b567704890f0586fd11248525f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6c523b6e9f203e167d7d0e35905b5644de824b567704890f0586fd11248525f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6c523b6e9f203e167d7d0e35905b5644de824b567704890f0586fd11248525f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a312484d2c0113f58a7a2dc9766f47811350316d54468bd1fa6446b60c71b816"}
{"level":"info","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6c523b6e9f203e167d7d0e35905b5644de824b567704890f0586fd11248525f"}
{"level":"debug","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb468b6eeda307f4cf04d62ddc3e92bffac6d092642e1f1fc8601045c17fd6de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:05:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:05:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb468b6eeda307f4cf04d62ddc3e92bffac6d092642e1f1fc8601045c17fd6de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc928132af03242d4c18c6705952c307130e43eb5c364a2658b52a4e5fce94a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb468b6eeda307f4cf04d62ddc3e92bffac6d092642e1f1fc8601045c17fd6de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb468b6eeda307f4cf04d62ddc3e92bffac6d092642e1f1fc8601045c17fd6de","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb468b6eeda307f4cf04d62ddc3e92bffac6d092642e1f1fc8601045c17fd6de"}
{"level":"debug","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb468b6eeda307f4cf04d62ddc3e92bffac6d092642e1f1fc8601045c17fd6de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:05:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:05:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb468b6eeda307f4cf04d62ddc3e92bffac6d092642e1f1fc8601045c17fd6de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc928132af03242d4c18c6705952c307130e43eb5c364a2658b52a4e5fce94a7"}
{"level":"info","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb468b6eeda307f4cf04d62ddc3e92bffac6d092642e1f1fc8601045c17fd6de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb468b6eeda307f4cf04d62ddc3e92bffac6d092642e1f1fc8601045c17fd6de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:05:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:05:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb468b6eeda307f4cf04d62ddc3e92bffac6d092642e1f1fc8601045c17fd6de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb468b6eeda307f4cf04d62ddc3e92bffac6d092642e1f1fc8601045c17fd6de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb468b6eeda307f4cf04d62ddc3e92bffac6d092642e1f1fc8601045c17fd6de","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb468b6eeda307f4cf04d62ddc3e92bffac6d092642e1f1fc8601045c17fd6de"}
{"level":"debug","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb468b6eeda307f4cf04d62ddc3e92bffac6d092642e1f1fc8601045c17fd6de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0230d1c8b02af858cec125f9d343d7122c92333869f336e8bda886721ab5d4f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb468b6eeda307f4cf04d62ddc3e92bffac6d092642e1f1fc8601045c17fd6de","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb468b6eeda307f4cf04d62ddc3e92bffac6d092642e1f1fc8601045c17fd6de"}
{"level":"info","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0230d1c8b02af858cec125f9d343d7122c92333869f336e8bda886721ab5d4f2"}
{"level":"debug","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e0039bee7f399d6e54e866059274d9890d3d8de1d0c932cd46e5c75f8afd09f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e0039bee7f399d6e54e866059274d9890d3d8de1d0c932cd46e5c75f8afd09f"}
{"level":"debug","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb468b6eeda307f4cf04d62ddc3e92bffac6d092642e1f1fc8601045c17fd6de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:05:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:05:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb468b6eeda307f4cf04d62ddc3e92bffac6d092642e1f1fc8601045c17fd6de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb468b6eeda307f4cf04d62ddc3e92bffac6d092642e1f1fc8601045c17fd6de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb468b6eeda307f4cf04d62ddc3e92bffac6d092642e1f1fc8601045c17fd6de","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb468b6eeda307f4cf04d62ddc3e92bffac6d092642e1f1fc8601045c17fd6de"}
{"level":"debug","ts":"2026-07-13T18:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a6339d21620610bfa04639f26a00e7fe569c929a38e1d32497951a4decc2288","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:05:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:05:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a6339d21620610bfa04639f26a00e7fe569c929a38e1d32497951a4decc2288","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a6339d21620610bfa04639f26a00e7fe569c929a38e1d32497951a4decc2288","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a6339d21620610bfa04639f26a00e7fe569c929a38e1d32497951a4decc2288","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a6339d21620610bfa04639f26a00e7fe569c929a38e1d32497951a4decc2288"}
{"level":"debug","ts":"2026-07-13T18:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a6339d21620610bfa04639f26a00e7fe569c929a38e1d32497951a4decc2288","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a6339d21620610bfa04639f26a00e7fe569c929a38e1d32497951a4decc2288"}
{"level":"debug","ts":"2026-07-13T18:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a6339d21620610bfa04639f26a00e7fe569c929a38e1d32497951a4decc2288","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:05:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:05:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a6339d21620610bfa04639f26a00e7fe569c929a38e1d32497951a4decc2288"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a6339d21620610bfa04639f26a00e7fe569c929a38e1d32497951a4decc2288","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e86fc11ba6f21f16ce853adbbd43823cad0017e122e5b41e41826d3381e30cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:05:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:05:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e86fc11ba6f21f16ce853adbbd43823cad0017e122e5b41e41826d3381e30cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a6339d21620610bfa04639f26a00e7fe569c929a38e1d32497951a4decc2288","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e86fc11ba6f21f16ce853adbbd43823cad0017e122e5b41e41826d3381e30cd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e86fc11ba6f21f16ce853adbbd43823cad0017e122e5b41e41826d3381e30cd"}
{"level":"debug","ts":"2026-07-13T18:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e86fc11ba6f21f16ce853adbbd43823cad0017e122e5b41e41826d3381e30cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:05:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:05:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e86fc11ba6f21f16ce853adbbd43823cad0017e122e5b41e41826d3381e30cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e86fc11ba6f21f16ce853adbbd43823cad0017e122e5b41e41826d3381e30cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e86fc11ba6f21f16ce853adbbd43823cad0017e122e5b41e41826d3381e30cd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a6339d21620610bfa04639f26a00e7fe569c929a38e1d32497951a4decc2288"}
{"level":"info","ts":"2026-07-13T18:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e86fc11ba6f21f16ce853adbbd43823cad0017e122e5b41e41826d3381e30cd"}
{"level":"debug","ts":"2026-07-13T18:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6622c04012e3044ea2493b76da100c6cc98e7a10fccfd686bce9509ce469415f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:05:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:05:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6622c04012e3044ea2493b76da100c6cc98e7a10fccfd686bce9509ce469415f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6622c04012e3044ea2493b76da100c6cc98e7a10fccfd686bce9509ce469415f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffdf6849543367b3b1bf6b6482b87528d257b9464524fe55610b787e23d48174","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6622c04012e3044ea2493b76da100c6cc98e7a10fccfd686bce9509ce469415f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6622c04012e3044ea2493b76da100c6cc98e7a10fccfd686bce9509ce469415f"}
{"level":"debug","ts":"2026-07-13T18:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce292a294ed84ea665e728471744d1e0bfbe02a54baa171396ddba8fb1257895","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6622c04012e3044ea2493b76da100c6cc98e7a10fccfd686bce9509ce469415f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:05:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:05:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6622c04012e3044ea2493b76da100c6cc98e7a10fccfd686bce9509ce469415f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffdf6849543367b3b1bf6b6482b87528d257b9464524fe55610b787e23d48174"}
{"level":"info","ts":"2026-07-13T18:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6622c04012e3044ea2493b76da100c6cc98e7a10fccfd686bce9509ce469415f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db7f11d7eddbb541b33ea26c7e3bad0bf758275f3bbbf245bef49d18cf35d511","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6622c04012e3044ea2493b76da100c6cc98e7a10fccfd686bce9509ce469415f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:05:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:05:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6622c04012e3044ea2493b76da100c6cc98e7a10fccfd686bce9509ce469415f"}
{"level":"info","ts":"2026-07-13T18:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6622c04012e3044ea2493b76da100c6cc98e7a10fccfd686bce9509ce469415f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6622c04012e3044ea2493b76da100c6cc98e7a10fccfd686bce9509ce469415f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:05:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:05:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6622c04012e3044ea2493b76da100c6cc98e7a10fccfd686bce9509ce469415f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6622c04012e3044ea2493b76da100c6cc98e7a10fccfd686bce9509ce469415f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6622c04012e3044ea2493b76da100c6cc98e7a10fccfd686bce9509ce469415f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:05:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:05:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6622c04012e3044ea2493b76da100c6cc98e7a10fccfd686bce9509ce469415f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce292a294ed84ea665e728471744d1e0bfbe02a54baa171396ddba8fb1257895"}
{"level":"error","ts":"2026-07-13T18:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6622c04012e3044ea2493b76da100c6cc98e7a10fccfd686bce9509ce469415f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6622c04012e3044ea2493b76da100c6cc98e7a10fccfd686bce9509ce469415f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T18:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6622c04012e3044ea2493b76da100c6cc98e7a10fccfd686bce9509ce469415f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6622c04012e3044ea2493b76da100c6cc98e7a10fccfd686bce9509ce469415f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4666c13e130e8549b07c33c2acfddca054083d066474da73f5e8cc3959e5e073","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db7f11d7eddbb541b33ea26c7e3bad0bf758275f3bbbf245bef49d18cf35d511"}
{"level":"debug","ts":"2026-07-13T18:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11f805719a5fd016ab77bf665035c8b3e57161270ec531912dd385a381ff141b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6622c04012e3044ea2493b76da100c6cc98e7a10fccfd686bce9509ce469415f"}
{"level":"debug","ts":"2026-07-13T18:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"233cb23a364a9f59a38444cdac59b37ee04d61926937d9474b310274d1d8a384","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4666c13e130e8549b07c33c2acfddca054083d066474da73f5e8cc3959e5e073"}
{"level":"debug","ts":"2026-07-13T18:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79d49edac2db1014f3090d51a543777010688b14851a37bf084ddd5299b75413","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11f805719a5fd016ab77bf665035c8b3e57161270ec531912dd385a381ff141b"}
{"level":"debug","ts":"2026-07-13T18:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d38be014d55da933d8de1e720d679ffacfa0fd59713b9fa00bd5fa4a9453c4e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/233cb23a364a9f59a38444cdac59b37ee04d61926937d9474b310274d1d8a384"}
{"level":"debug","ts":"2026-07-13T18:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a5deb208bd88ff81a5fc901be7103cf9c7e8190b2537881bf0d8abd434d997d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79d49edac2db1014f3090d51a543777010688b14851a37bf084ddd5299b75413"}
{"level":"debug","ts":"2026-07-13T18:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"208855e9b86067955f9a6fef2aba575418879330c21dd43a4eb33793fa0fde47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d38be014d55da933d8de1e720d679ffacfa0fd59713b9fa00bd5fa4a9453c4e3"}
{"level":"debug","ts":"2026-07-13T18:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34f2a54846c06f19022727f634be5c948928a1e098a29d4e9e81087e78cad116","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a5deb208bd88ff81a5fc901be7103cf9c7e8190b2537881bf0d8abd434d997d"}
{"level":"info","ts":"2026-07-13T18:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/208855e9b86067955f9a6fef2aba575418879330c21dd43a4eb33793fa0fde47"}
{"level":"info","ts":"2026-07-13T18:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34f2a54846c06f19022727f634be5c948928a1e098a29d4e9e81087e78cad116"}
{"level":"info","ts":"2026-07-13T18:05:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"606e91dc-dff3-4894-9a4e-4347bae1b535","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:51332","PortSpecifier":{"PortValue":51332}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"606e91dc-dff3-4894-9a4e-4347bae1b535","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f54db3.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:05:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"606e91dc-dff3-4894-9a4e-4347bae1b535","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:51332","PortSpecifier":{"PortValue":51332}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783965920,"nanos":181237152},"http":{"id":"606e91dc-dff3-4894-9a4e-4347bae1b535","method":"POST","headers":{":authority":"e2e-shared-a-f54db3.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:05:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"606e91dc-dff3-4894-9a4e-4347bae1b535","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T18:05:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"606e91dc-dff3-4894-9a4e-4347bae1b535","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"aed4c252-5d29-4cf0-9404-468616a85f89","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e61dd9bf-ddf3-4b22-a82f-c5020a72ba79"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/132ce6b0ec12"]}}
{"level":"debug","ts":"2026-07-13T18:05:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"606e91dc-dff3-4894-9a4e-4347bae1b535","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/132ce6b0ec12"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e61dd9bf-ddf3-4b22-a82f-c5020a72ba79"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"aed4c252-5d29-4cf0-9404-468616a85f89","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4a6339d21620610bfa04639f26a00e7fe569c929a38e1d32497951a4decc2288"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f54db3.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:05:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"606e91dc-dff3-4894-9a4e-4347bae1b535","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:05:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"606e91dc-dff3-4894-9a4e-4347bae1b535","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:05:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"606e91dc-dff3-4894-9a4e-4347bae1b535","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f54db3/sub-test-model-f54db3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:05:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"606e91dc-dff3-4894-9a4e-4347bae1b535","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T18:05:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"606e91dc-dff3-4894-9a4e-4347bae1b535","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T18:05:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"606e91dc-dff3-4894-9a4e-4347bae1b535","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-13T18:05:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"606e91dc-dff3-4894-9a4e-4347bae1b535","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:05:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"606e91dc-dff3-4894-9a4e-4347bae1b535","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:05:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2baaf550-e73c-4a17-9ef2-4c2e04d57d29","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:49052","PortSpecifier":{"PortValue":49052}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2baaf550-e73c-4a17-9ef2-4c2e04d57d29","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b57346.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:05:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2baaf550-e73c-4a17-9ef2-4c2e04d57d29","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:49052","PortSpecifier":{"PortValue":49052}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783965920,"nanos":230544591},"http":{"id":"2baaf550-e73c-4a17-9ef2-4c2e04d57d29","method":"POST","headers":{":authority":"e2e-shared-b-b57346.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:05:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2baaf550-e73c-4a17-9ef2-4c2e04d57d29","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T18:05:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2baaf550-e73c-4a17-9ef2-4c2e04d57d29","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"aed4c252-5d29-4cf0-9404-468616a85f89","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e61dd9bf-ddf3-4b22-a82f-c5020a72ba79"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/132ce6b0ec12"]}}
{"level":"debug","ts":"2026-07-13T18:05:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2baaf550-e73c-4a17-9ef2-4c2e04d57d29","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/132ce6b0ec12"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e61dd9bf-ddf3-4b22-a82f-c5020a72ba79"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"aed4c252-5d29-4cf0-9404-468616a85f89","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7a2965aef3b7c2070a147b46e8814f5e0947cdbd04f47e55191ef4931e36aa19"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b57346.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:05:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2baaf550-e73c-4a17-9ef2-4c2e04d57d29","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:05:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2baaf550-e73c-4a17-9ef2-4c2e04d57d29","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:05:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2baaf550-e73c-4a17-9ef2-4c2e04d57d29","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b57346/sub-test-model-b57346\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:05:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2baaf550-e73c-4a17-9ef2-4c2e04d57d29","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T18:05:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2baaf550-e73c-4a17-9ef2-4c2e04d57d29","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T18:05:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2baaf550-e73c-4a17-9ef2-4c2e04d57d29","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T18:05:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2baaf550-e73c-4a17-9ef2-4c2e04d57d29","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:05:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2baaf550-e73c-4a17-9ef2-4c2e04d57d29","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:05:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a53ec316-0a7c-4484-9f14-1105e1f5a250","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:51338","PortSpecifier":{"PortValue":51338}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a53ec316-0a7c-4484-9f14-1105e1f5a250","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-f54db3.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:05:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a53ec316-0a7c-4484-9f14-1105e1f5a250","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:51338","PortSpecifier":{"PortValue":51338}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783965920,"nanos":275295373},"http":{"id":"a53ec316-0a7c-4484-9f14-1105e1f5a250","method":"GET","headers":{":authority":"e2e-shared-a-f54db3.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:05:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a53ec316-0a7c-4484-9f14-1105e1f5a250","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1HY2071EJzFijSvkp_PYPvnvIBjahALOWJdSxULRxfUNn8i3WhB8Pa6iKmcuJ"}
{"level":"debug","ts":"2026-07-13T18:05:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a53ec316-0a7c-4484-9f14-1105e1f5a250","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f54db3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1HY2071EJzFijSvkp_PYPvnvIBjahALOWJdSxULRxfUNn8i3WhB8Pa6iKmcuJ\"}"}
{"level":"debug","ts":"2026-07-13T18:05:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a53ec316-0a7c-4484-9f14-1105e1f5a250","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f54db3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cc9d6b91-93aa-461b-aa07-f81592012217","keyName":"e2e-sub-iso-1360b7","subscription":"e2e-a-only-d68c1c","tenant":"e2e-shared-a-f54db3","userId":"cc9d6b91-93aa-461b-aa07-f81592012217","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T18:05:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a53ec316-0a7c-4484-9f14-1105e1f5a250","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:05:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a53ec316-0a7c-4484-9f14-1105e1f5a250","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:05:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a53ec316-0a7c-4484-9f14-1105e1f5a250","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:05:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a53ec316-0a7c-4484-9f14-1105e1f5a250","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f54db3/sub-test-model-f54db3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:05:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a53ec316-0a7c-4484-9f14-1105e1f5a250","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-13T18:05:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a53ec316-0a7c-4484-9f14-1105e1f5a250","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T18:05:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a53ec316-0a7c-4484-9f14-1105e1f5a250","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T18:05:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a53ec316-0a7c-4484-9f14-1105e1f5a250","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-d68c1c"}
{"level":"info","ts":"2026-07-13T18:05:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a53ec316-0a7c-4484-9f14-1105e1f5a250","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:05:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a53ec316-0a7c-4484-9f14-1105e1f5a250","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:05:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7293017f-ea90-4c9d-ae70-6cd39e522eb9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:49062","PortSpecifier":{"PortValue":49062}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7293017f-ea90-4c9d-ae70-6cd39e522eb9","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-b57346.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:05:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7293017f-ea90-4c9d-ae70-6cd39e522eb9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:49062","PortSpecifier":{"PortValue":49062}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783965920,"nanos":321238996},"http":{"id":"7293017f-ea90-4c9d-ae70-6cd39e522eb9","method":"GET","headers":{":authority":"e2e-shared-b-b57346.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:05:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7293017f-ea90-4c9d-ae70-6cd39e522eb9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1OQPr0PKFG4DzIKx5_Dj7RSm4ndFGaXXOgZcZiWrmnF9Y5xvrg6yCPxvBLKIC"}
{"level":"debug","ts":"2026-07-13T18:05:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7293017f-ea90-4c9d-ae70-6cd39e522eb9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-b57346.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1OQPr0PKFG4DzIKx5_Dj7RSm4ndFGaXXOgZcZiWrmnF9Y5xvrg6yCPxvBLKIC\"}"}
{"level":"debug","ts":"2026-07-13T18:05:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7293017f-ea90-4c9d-ae70-6cd39e522eb9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b57346.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"89d95e35-39c4-40f6-8e56-4c9f91a2c46e","keyName":"e2e-sub-iso-347cce","subscription":"e2e-b-only-d68c1c","tenant":"e2e-shared-b-b57346","userId":"89d95e35-39c4-40f6-8e56-4c9f91a2c46e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T18:05:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7293017f-ea90-4c9d-ae70-6cd39e522eb9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:05:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7293017f-ea90-4c9d-ae70-6cd39e522eb9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:05:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7293017f-ea90-4c9d-ae70-6cd39e522eb9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:05:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7293017f-ea90-4c9d-ae70-6cd39e522eb9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b57346/sub-test-model-b57346\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:05:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7293017f-ea90-4c9d-ae70-6cd39e522eb9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T18:05:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7293017f-ea90-4c9d-ae70-6cd39e522eb9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-d68c1c"}
{"level":"debug","ts":"2026-07-13T18:05:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7293017f-ea90-4c9d-ae70-6cd39e522eb9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-13T18:05:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7293017f-ea90-4c9d-ae70-6cd39e522eb9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T18:05:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7293017f-ea90-4c9d-ae70-6cd39e522eb9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:05:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7293017f-ea90-4c9d-ae70-6cd39e522eb9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:05:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1581dcf9-5cd5-403e-97f7-44929f3c6b3f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:60396","PortSpecifier":{"PortValue":60396}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1581dcf9-5cd5-403e-97f7-44929f3c6b3f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f54db3.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:05:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1581dcf9-5cd5-403e-97f7-44929f3c6b3f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:60396","PortSpecifier":{"PortValue":60396}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783965930,"nanos":572379440},"http":{"id":"1581dcf9-5cd5-403e-97f7-44929f3c6b3f","method":"POST","headers":{":authority":"e2e-shared-a-f54db3.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:05:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1581dcf9-5cd5-403e-97f7-44929f3c6b3f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T18:05:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1581dcf9-5cd5-403e-97f7-44929f3c6b3f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"aed4c252-5d29-4cf0-9404-468616a85f89","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e61dd9bf-ddf3-4b22-a82f-c5020a72ba79"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/132ce6b0ec12"]}}
{"level":"debug","ts":"2026-07-13T18:05:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1581dcf9-5cd5-403e-97f7-44929f3c6b3f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/132ce6b0ec12"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e61dd9bf-ddf3-4b22-a82f-c5020a72ba79"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"aed4c252-5d29-4cf0-9404-468616a85f89","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4a6339d21620610bfa04639f26a00e7fe569c929a38e1d32497951a4decc2288"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f54db3.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:05:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1581dcf9-5cd5-403e-97f7-44929f3c6b3f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:05:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1581dcf9-5cd5-403e-97f7-44929f3c6b3f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:05:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1581dcf9-5cd5-403e-97f7-44929f3c6b3f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f54db3/sub-test-model-f54db3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:05:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1581dcf9-5cd5-403e-97f7-44929f3c6b3f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T18:05:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1581dcf9-5cd5-403e-97f7-44929f3c6b3f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T18:05:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1581dcf9-5cd5-403e-97f7-44929f3c6b3f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T18:05:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1581dcf9-5cd5-403e-97f7-44929f3c6b3f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:05:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1581dcf9-5cd5-403e-97f7-44929f3c6b3f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:05:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"70ed14ae-7893-4fb8-a02a-4b79ee80af43","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:43068","PortSpecifier":{"PortValue":43068}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"70ed14ae-7893-4fb8-a02a-4b79ee80af43","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b57346.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:05:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"70ed14ae-7893-4fb8-a02a-4b79ee80af43","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:43068","PortSpecifier":{"PortValue":43068}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783965930,"nanos":610518129},"http":{"id":"70ed14ae-7893-4fb8-a02a-4b79ee80af43","method":"POST","headers":{":authority":"e2e-shared-b-b57346.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:05:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"70ed14ae-7893-4fb8-a02a-4b79ee80af43","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T18:05:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"70ed14ae-7893-4fb8-a02a-4b79ee80af43","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"aed4c252-5d29-4cf0-9404-468616a85f89","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e61dd9bf-ddf3-4b22-a82f-c5020a72ba79"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/132ce6b0ec12"]}}
{"level":"debug","ts":"2026-07-13T18:05:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"70ed14ae-7893-4fb8-a02a-4b79ee80af43","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/132ce6b0ec12"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e61dd9bf-ddf3-4b22-a82f-c5020a72ba79"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"aed4c252-5d29-4cf0-9404-468616a85f89","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7a2965aef3b7c2070a147b46e8814f5e0947cdbd04f47e55191ef4931e36aa19"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b57346.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:05:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70ed14ae-7893-4fb8-a02a-4b79ee80af43","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:05:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70ed14ae-7893-4fb8-a02a-4b79ee80af43","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:05:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70ed14ae-7893-4fb8-a02a-4b79ee80af43","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b57346/sub-test-model-b57346\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:05:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"70ed14ae-7893-4fb8-a02a-4b79ee80af43","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T18:05:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"70ed14ae-7893-4fb8-a02a-4b79ee80af43","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T18:05:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"70ed14ae-7893-4fb8-a02a-4b79ee80af43","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T18:05:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"70ed14ae-7893-4fb8-a02a-4b79ee80af43","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:05:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"70ed14ae-7893-4fb8-a02a-4b79ee80af43","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:05:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6459b17c-4c8d-4ff8-83e2-682f03a343e0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:60404","PortSpecifier":{"PortValue":60404}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6459b17c-4c8d-4ff8-83e2-682f03a343e0","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-f54db3.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:05:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6459b17c-4c8d-4ff8-83e2-682f03a343e0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:60404","PortSpecifier":{"PortValue":60404}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783965930,"nanos":646937298},"http":{"id":"6459b17c-4c8d-4ff8-83e2-682f03a343e0","method":"POST","headers":{":authority":"e2e-shared-a-f54db3.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:05:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6459b17c-4c8d-4ff8-83e2-682f03a343e0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-mM1wORVtSEfRwUSr_BeYtOgGpF4ZtzvyZE5oC1KG5PMXepiJsRpLK7QwBN7X"}
{"level":"debug","ts":"2026-07-13T18:05:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6459b17c-4c8d-4ff8-83e2-682f03a343e0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f54db3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-mM1wORVtSEfRwUSr_BeYtOgGpF4ZtzvyZE5oC1KG5PMXepiJsRpLK7QwBN7X\"}"}
{"level":"debug","ts":"2026-07-13T18:05:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6459b17c-4c8d-4ff8-83e2-682f03a343e0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f54db3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0b7e34dc-dc56-4c89-80c9-e30da0ec6429","keyName":"e2e-sub-iso-f045a6","subscription":"e2e-shared-sub-bdd3e9","tenant":"e2e-shared-a-f54db3","userId":"0b7e34dc-dc56-4c89-80c9-e30da0ec6429","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T18:05:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6459b17c-4c8d-4ff8-83e2-682f03a343e0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:05:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6459b17c-4c8d-4ff8-83e2-682f03a343e0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:05:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6459b17c-4c8d-4ff8-83e2-682f03a343e0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:05:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6459b17c-4c8d-4ff8-83e2-682f03a343e0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f54db3/sub-test-model-f54db3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:05:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6459b17c-4c8d-4ff8-83e2-682f03a343e0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T18:05:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6459b17c-4c8d-4ff8-83e2-682f03a343e0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-13T18:05:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6459b17c-4c8d-4ff8-83e2-682f03a343e0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-bdd3e9"}
{"level":"debug","ts":"2026-07-13T18:05:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6459b17c-4c8d-4ff8-83e2-682f03a343e0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T18:05:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6459b17c-4c8d-4ff8-83e2-682f03a343e0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:05:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6459b17c-4c8d-4ff8-83e2-682f03a343e0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:05:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cda1123d-f10d-4c00-8b7f-0fa9c165629c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:43070","PortSpecifier":{"PortValue":43070}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cda1123d-f10d-4c00-8b7f-0fa9c165629c","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-b57346.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:05:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cda1123d-f10d-4c00-8b7f-0fa9c165629c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:43070","PortSpecifier":{"PortValue":43070}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783965930,"nanos":680654179},"http":{"id":"cda1123d-f10d-4c00-8b7f-0fa9c165629c","method":"POST","headers":{":authority":"e2e-shared-b-b57346.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:05:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cda1123d-f10d-4c00-8b7f-0fa9c165629c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Ar5VzEKkg9jMaTpC_sgxwqatw92QG4KlRF6eZOaYFITvRaBBFRiCWISQVxjH"}
{"level":"debug","ts":"2026-07-13T18:05:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cda1123d-f10d-4c00-8b7f-0fa9c165629c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-b57346.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Ar5VzEKkg9jMaTpC_sgxwqatw92QG4KlRF6eZOaYFITvRaBBFRiCWISQVxjH\"}"}
{"level":"debug","ts":"2026-07-13T18:05:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cda1123d-f10d-4c00-8b7f-0fa9c165629c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b57346.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"14332843-c44e-4155-9423-76a127de6970","keyName":"e2e-sub-iso-9f22a8","subscription":"e2e-shared-sub-bdd3e9","tenant":"e2e-shared-b-b57346","userId":"14332843-c44e-4155-9423-76a127de6970","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T18:05:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cda1123d-f10d-4c00-8b7f-0fa9c165629c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:05:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cda1123d-f10d-4c00-8b7f-0fa9c165629c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:05:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cda1123d-f10d-4c00-8b7f-0fa9c165629c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:05:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cda1123d-f10d-4c00-8b7f-0fa9c165629c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b57346/sub-test-model-b57346\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:05:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cda1123d-f10d-4c00-8b7f-0fa9c165629c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T18:05:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cda1123d-f10d-4c00-8b7f-0fa9c165629c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-bdd3e9"}
{"level":"debug","ts":"2026-07-13T18:05:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cda1123d-f10d-4c00-8b7f-0fa9c165629c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T18:05:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cda1123d-f10d-4c00-8b7f-0fa9c165629c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-13T18:05:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cda1123d-f10d-4c00-8b7f-0fa9c165629c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:05:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cda1123d-f10d-4c00-8b7f-0fa9c165629c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d38be014d55da933d8de1e720d679ffacfa0fd59713b9fa00bd5fa4a9453c4e3"}
{"level":"info","ts":"2026-07-13T18:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/64c5a3d08a412815e0ab3bbf9fd8138ae693a7f551e0291d2ebd8d177558f87a"}
{"level":"info","ts":"2026-07-13T18:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/144bc37ff14ec1d8ad57cc20a1ac9b732d94cb0a896c297067205f1137acb555"}
{"level":"info","ts":"2026-07-13T18:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6622c04012e3044ea2493b76da100c6cc98e7a10fccfd686bce9509ce469415f"}
{"level":"info","ts":"2026-07-13T18:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ffdf6849543367b3b1bf6b6482b87528d257b9464524fe55610b787e23d48174"}
{"level":"info","ts":"2026-07-13T18:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1e86fc11ba6f21f16ce853adbbd43823cad0017e122e5b41e41826d3381e30cd"}
{"level":"info","ts":"2026-07-13T18:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4666c13e130e8549b07c33c2acfddca054083d066474da73f5e8cc3959e5e073"}
{"level":"info","ts":"2026-07-13T18:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8a5deb208bd88ff81a5fc901be7103cf9c7e8190b2537881bf0d8abd434d997d"}
{"level":"info","ts":"2026-07-13T18:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2e0039bee7f399d6e54e866059274d9890d3d8de1d0c932cd46e5c75f8afd09f"}
{"level":"info","ts":"2026-07-13T18:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e6c523b6e9f203e167d7d0e35905b5644de824b567704890f0586fd11248525f"}
{"level":"info","ts":"2026-07-13T18:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a312484d2c0113f58a7a2dc9766f47811350316d54468bd1fa6446b60c71b816"}
{"level":"info","ts":"2026-07-13T18:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/233cb23a364a9f59a38444cdac59b37ee04d61926937d9474b310274d1d8a384"}
{"level":"info","ts":"2026-07-13T18:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/11f805719a5fd016ab77bf665035c8b3e57161270ec531912dd385a381ff141b"}
{"level":"info","ts":"2026-07-13T18:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1d9b1dd24fc61ff627d4c4f7b2aaba4fcca3385afe298e02ee8952be64a1648b"}
{"level":"info","ts":"2026-07-13T18:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ce292a294ed84ea665e728471744d1e0bfbe02a54baa171396ddba8fb1257895"}
{"level":"info","ts":"2026-07-13T18:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0230d1c8b02af858cec125f9d343d7122c92333869f336e8bda886721ab5d4f2"}
{"level":"debug","ts":"2026-07-13T18:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b869053897499a026debd6c1764c13283384aa2674731bf53db68acde5cbf3de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:05:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:05:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b869053897499a026debd6c1764c13283384aa2674731bf53db68acde5cbf3de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b869053897499a026debd6c1764c13283384aa2674731bf53db68acde5cbf3de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b869053897499a026debd6c1764c13283384aa2674731bf53db68acde5cbf3de","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b869053897499a026debd6c1764c13283384aa2674731bf53db68acde5cbf3de"}
{"level":"debug","ts":"2026-07-13T18:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b869053897499a026debd6c1764c13283384aa2674731bf53db68acde5cbf3de","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b869053897499a026debd6c1764c13283384aa2674731bf53db68acde5cbf3de"}
{"level":"debug","ts":"2026-07-13T18:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b869053897499a026debd6c1764c13283384aa2674731bf53db68acde5cbf3de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:05:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:05:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b869053897499a026debd6c1764c13283384aa2674731bf53db68acde5cbf3de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b869053897499a026debd6c1764c13283384aa2674731bf53db68acde5cbf3de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b869053897499a026debd6c1764c13283384aa2674731bf53db68acde5cbf3de","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b869053897499a026debd6c1764c13283384aa2674731bf53db68acde5cbf3de"}
{"level":"debug","ts":"2026-07-13T18:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d07bb02649cc1a82fad657a759e85d29981c866f0914389b750a419e48c73514","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:05:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:05:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d07bb02649cc1a82fad657a759e85d29981c866f0914389b750a419e48c73514","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d07bb02649cc1a82fad657a759e85d29981c866f0914389b750a419e48c73514","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d07bb02649cc1a82fad657a759e85d29981c866f0914389b750a419e48c73514","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d07bb02649cc1a82fad657a759e85d29981c866f0914389b750a419e48c73514"}
{"level":"debug","ts":"2026-07-13T18:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d07bb02649cc1a82fad657a759e85d29981c866f0914389b750a419e48c73514","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d07bb02649cc1a82fad657a759e85d29981c866f0914389b750a419e48c73514"}
{"level":"debug","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d07bb02649cc1a82fad657a759e85d29981c866f0914389b750a419e48c73514","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:05:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:05:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d07bb02649cc1a82fad657a759e85d29981c866f0914389b750a419e48c73514"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d07bb02649cc1a82fad657a759e85d29981c866f0914389b750a419e48c73514","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d07bb02649cc1a82fad657a759e85d29981c866f0914389b750a419e48c73514","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:05:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:05:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d07bb02649cc1a82fad657a759e85d29981c866f0914389b750a419e48c73514","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d07bb02649cc1a82fad657a759e85d29981c866f0914389b750a419e48c73514","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d07bb02649cc1a82fad657a759e85d29981c866f0914389b750a419e48c73514","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d07bb02649cc1a82fad657a759e85d29981c866f0914389b750a419e48c73514"}
{"level":"debug","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d07bb02649cc1a82fad657a759e85d29981c866f0914389b750a419e48c73514","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d07bb02649cc1a82fad657a759e85d29981c866f0914389b750a419e48c73514"}
{"level":"debug","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d07bb02649cc1a82fad657a759e85d29981c866f0914389b750a419e48c73514","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:05:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:05:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d07bb02649cc1a82fad657a759e85d29981c866f0914389b750a419e48c73514"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d07bb02649cc1a82fad657a759e85d29981c866f0914389b750a419e48c73514","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d07bb02649cc1a82fad657a759e85d29981c866f0914389b750a419e48c73514","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:05:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:05:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d07bb02649cc1a82fad657a759e85d29981c866f0914389b750a419e48c73514","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"103e1e43d493a572eb27ef2ad721209fb5c19ba4a18dcb3a6ab9a78624b2d187","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:05:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:05:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d07bb02649cc1a82fad657a759e85d29981c866f0914389b750a419e48c73514"}
{"level":"info","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"103e1e43d493a572eb27ef2ad721209fb5c19ba4a18dcb3a6ab9a78624b2d187","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d07bb02649cc1a82fad657a759e85d29981c866f0914389b750a419e48c73514","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:05:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:05:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d07bb02649cc1a82fad657a759e85d29981c866f0914389b750a419e48c73514"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/103e1e43d493a572eb27ef2ad721209fb5c19ba4a18dcb3a6ab9a78624b2d187"}
{"level":"info","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d07bb02649cc1a82fad657a759e85d29981c866f0914389b750a419e48c73514","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"103e1e43d493a572eb27ef2ad721209fb5c19ba4a18dcb3a6ab9a78624b2d187","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:05:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:05:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["103e1e43d493a572eb27ef2ad721209fb5c19ba4a18dcb3a6ab9a78624b2d187"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"103e1e43d493a572eb27ef2ad721209fb5c19ba4a18dcb3a6ab9a78624b2d187","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d07bb02649cc1a82fad657a759e85d29981c866f0914389b750a419e48c73514","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:05:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:05:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d07bb02649cc1a82fad657a759e85d29981c866f0914389b750a419e48c73514"}
{"level":"info","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d07bb02649cc1a82fad657a759e85d29981c866f0914389b750a419e48c73514","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"103e1e43d493a572eb27ef2ad721209fb5c19ba4a18dcb3a6ab9a78624b2d187","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:05:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:05:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/103e1e43d493a572eb27ef2ad721209fb5c19ba4a18dcb3a6ab9a78624b2d187"}
{"level":"info","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"103e1e43d493a572eb27ef2ad721209fb5c19ba4a18dcb3a6ab9a78624b2d187","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d07bb02649cc1a82fad657a759e85d29981c866f0914389b750a419e48c73514","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"103e1e43d493a572eb27ef2ad721209fb5c19ba4a18dcb3a6ab9a78624b2d187","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:05:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:05:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["103e1e43d493a572eb27ef2ad721209fb5c19ba4a18dcb3a6ab9a78624b2d187"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d07bb02649cc1a82fad657a759e85d29981c866f0914389b750a419e48c73514"}
{"level":"info","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"103e1e43d493a572eb27ef2ad721209fb5c19ba4a18dcb3a6ab9a78624b2d187","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d07bb02649cc1a82fad657a759e85d29981c866f0914389b750a419e48c73514","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:05:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:05:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d07bb02649cc1a82fad657a759e85d29981c866f0914389b750a419e48c73514"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d07bb02649cc1a82fad657a759e85d29981c866f0914389b750a419e48c73514","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"103e1e43d493a572eb27ef2ad721209fb5c19ba4a18dcb3a6ab9a78624b2d187","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:05:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:05:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/103e1e43d493a572eb27ef2ad721209fb5c19ba4a18dcb3a6ab9a78624b2d187"}
{"level":"info","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"103e1e43d493a572eb27ef2ad721209fb5c19ba4a18dcb3a6ab9a78624b2d187","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d07bb02649cc1a82fad657a759e85d29981c866f0914389b750a419e48c73514","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:05:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:05:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d07bb02649cc1a82fad657a759e85d29981c866f0914389b750a419e48c73514","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"103e1e43d493a572eb27ef2ad721209fb5c19ba4a18dcb3a6ab9a78624b2d187","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:05:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:05:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["103e1e43d493a572eb27ef2ad721209fb5c19ba4a18dcb3a6ab9a78624b2d187"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d07bb02649cc1a82fad657a759e85d29981c866f0914389b750a419e48c73514"}
{"level":"info","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"103e1e43d493a572eb27ef2ad721209fb5c19ba4a18dcb3a6ab9a78624b2d187","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d07bb02649cc1a82fad657a759e85d29981c866f0914389b750a419e48c73514","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:05:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:05:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d07bb02649cc1a82fad657a759e85d29981c866f0914389b750a419e48c73514"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/103e1e43d493a572eb27ef2ad721209fb5c19ba4a18dcb3a6ab9a78624b2d187"}
{"level":"info","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d07bb02649cc1a82fad657a759e85d29981c866f0914389b750a419e48c73514","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"103e1e43d493a572eb27ef2ad721209fb5c19ba4a18dcb3a6ab9a78624b2d187","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d07bb02649cc1a82fad657a759e85d29981c866f0914389b750a419e48c73514","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:05:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:05:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d07bb02649cc1a82fad657a759e85d29981c866f0914389b750a419e48c73514","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d07bb02649cc1a82fad657a759e85d29981c866f0914389b750a419e48c73514","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d07bb02649cc1a82fad657a759e85d29981c866f0914389b750a419e48c73514"}
{"level":"debug","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d07bb02649cc1a82fad657a759e85d29981c866f0914389b750a419e48c73514","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:05:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:05:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d07bb02649cc1a82fad657a759e85d29981c866f0914389b750a419e48c73514"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d07bb02649cc1a82fad657a759e85d29981c866f0914389b750a419e48c73514","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d07bb02649cc1a82fad657a759e85d29981c866f0914389b750a419e48c73514","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/103e1e43d493a572eb27ef2ad721209fb5c19ba4a18dcb3a6ab9a78624b2d187"}
{"level":"info","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d07bb02649cc1a82fad657a759e85d29981c866f0914389b750a419e48c73514"}
{"level":"debug","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c216124eadcff54789a0fb23354d358b2acf6b056141f11b6aaf631464e773a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:05:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:05:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c216124eadcff54789a0fb23354d358b2acf6b056141f11b6aaf631464e773a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c216124eadcff54789a0fb23354d358b2acf6b056141f11b6aaf631464e773a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c216124eadcff54789a0fb23354d358b2acf6b056141f11b6aaf631464e773a1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c216124eadcff54789a0fb23354d358b2acf6b056141f11b6aaf631464e773a1"}
{"level":"debug","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c216124eadcff54789a0fb23354d358b2acf6b056141f11b6aaf631464e773a1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c216124eadcff54789a0fb23354d358b2acf6b056141f11b6aaf631464e773a1"}
{"level":"debug","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c216124eadcff54789a0fb23354d358b2acf6b056141f11b6aaf631464e773a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:05:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:05:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c216124eadcff54789a0fb23354d358b2acf6b056141f11b6aaf631464e773a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c216124eadcff54789a0fb23354d358b2acf6b056141f11b6aaf631464e773a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c216124eadcff54789a0fb23354d358b2acf6b056141f11b6aaf631464e773a1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c216124eadcff54789a0fb23354d358b2acf6b056141f11b6aaf631464e773a1"}
{"level":"debug","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1975fff45f9590bb64062446ce09dc4fa99dc910654539b55a92d9567cb6fbff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:05:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:05:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1975fff45f9590bb64062446ce09dc4fa99dc910654539b55a92d9567cb6fbff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1975fff45f9590bb64062446ce09dc4fa99dc910654539b55a92d9567cb6fbff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1975fff45f9590bb64062446ce09dc4fa99dc910654539b55a92d9567cb6fbff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1975fff45f9590bb64062446ce09dc4fa99dc910654539b55a92d9567cb6fbff"}
{"level":"debug","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1975fff45f9590bb64062446ce09dc4fa99dc910654539b55a92d9567cb6fbff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1975fff45f9590bb64062446ce09dc4fa99dc910654539b55a92d9567cb6fbff"}
{"level":"debug","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1975fff45f9590bb64062446ce09dc4fa99dc910654539b55a92d9567cb6fbff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:05:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:05:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1975fff45f9590bb64062446ce09dc4fa99dc910654539b55a92d9567cb6fbff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1975fff45f9590bb64062446ce09dc4fa99dc910654539b55a92d9567cb6fbff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1975fff45f9590bb64062446ce09dc4fa99dc910654539b55a92d9567cb6fbff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:05:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:05:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1975fff45f9590bb64062446ce09dc4fa99dc910654539b55a92d9567cb6fbff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1975fff45f9590bb64062446ce09dc4fa99dc910654539b55a92d9567cb6fbff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1975fff45f9590bb64062446ce09dc4fa99dc910654539b55a92d9567cb6fbff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1975fff45f9590bb64062446ce09dc4fa99dc910654539b55a92d9567cb6fbff"}
{"level":"debug","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1975fff45f9590bb64062446ce09dc4fa99dc910654539b55a92d9567cb6fbff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1975fff45f9590bb64062446ce09dc4fa99dc910654539b55a92d9567cb6fbff"}
{"level":"debug","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1975fff45f9590bb64062446ce09dc4fa99dc910654539b55a92d9567cb6fbff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:05:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:05:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1975fff45f9590bb64062446ce09dc4fa99dc910654539b55a92d9567cb6fbff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1975fff45f9590bb64062446ce09dc4fa99dc910654539b55a92d9567cb6fbff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1975fff45f9590bb64062446ce09dc4fa99dc910654539b55a92d9567cb6fbff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:05:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:05:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1975fff45f9590bb64062446ce09dc4fa99dc910654539b55a92d9567cb6fbff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89fdf929eff6a6b1c1569cc7263c619a41b978276451b7001ae8e7bd2ffa1003","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:05:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:05:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1975fff45f9590bb64062446ce09dc4fa99dc910654539b55a92d9567cb6fbff"}
{"level":"info","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89fdf929eff6a6b1c1569cc7263c619a41b978276451b7001ae8e7bd2ffa1003","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1975fff45f9590bb64062446ce09dc4fa99dc910654539b55a92d9567cb6fbff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:05:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:05:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1975fff45f9590bb64062446ce09dc4fa99dc910654539b55a92d9567cb6fbff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1975fff45f9590bb64062446ce09dc4fa99dc910654539b55a92d9567cb6fbff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f6b5fef33d461101a78af85b060592dfe6abf4574120e7a7d160e02934f5f5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:05:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:05:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89fdf929eff6a6b1c1569cc7263c619a41b978276451b7001ae8e7bd2ffa1003"}
{"level":"info","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f6b5fef33d461101a78af85b060592dfe6abf4574120e7a7d160e02934f5f5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89fdf929eff6a6b1c1569cc7263c619a41b978276451b7001ae8e7bd2ffa1003","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:05:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:05:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89fdf929eff6a6b1c1569cc7263c619a41b978276451b7001ae8e7bd2ffa1003"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89fdf929eff6a6b1c1569cc7263c619a41b978276451b7001ae8e7bd2ffa1003","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1975fff45f9590bb64062446ce09dc4fa99dc910654539b55a92d9567cb6fbff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f6b5fef33d461101a78af85b060592dfe6abf4574120e7a7d160e02934f5f5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:05:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:05:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f6b5fef33d461101a78af85b060592dfe6abf4574120e7a7d160e02934f5f5d"}
{"level":"info","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f6b5fef33d461101a78af85b060592dfe6abf4574120e7a7d160e02934f5f5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89fdf929eff6a6b1c1569cc7263c619a41b978276451b7001ae8e7bd2ffa1003","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f6b5fef33d461101a78af85b060592dfe6abf4574120e7a7d160e02934f5f5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:05:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:05:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f6b5fef33d461101a78af85b060592dfe6abf4574120e7a7d160e02934f5f5d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1975fff45f9590bb64062446ce09dc4fa99dc910654539b55a92d9567cb6fbff"}
{"level":"info","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f6b5fef33d461101a78af85b060592dfe6abf4574120e7a7d160e02934f5f5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f6b5fef33d461101a78af85b060592dfe6abf4574120e7a7d160e02934f5f5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:05:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:05:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f6b5fef33d461101a78af85b060592dfe6abf4574120e7a7d160e02934f5f5d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2f6b5fef33d461101a78af85b060592dfe6abf4574120e7a7d160e02934f5f5d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2f6b5fef33d461101a78af85b060592dfe6abf4574120e7a7d160e02934f5f5d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f6b5fef33d461101a78af85b060592dfe6abf4574120e7a7d160e02934f5f5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56bc7f18fbd299570490a28ca7d67689e9a42881e807e784cdd1f35dc9980b5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:05:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:05:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89fdf929eff6a6b1c1569cc7263c619a41b978276451b7001ae8e7bd2ffa1003"}
{"level":"info","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56bc7f18fbd299570490a28ca7d67689e9a42881e807e784cdd1f35dc9980b5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f6b5fef33d461101a78af85b060592dfe6abf4574120e7a7d160e02934f5f5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:05:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:05:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f6b5fef33d461101a78af85b060592dfe6abf4574120e7a7d160e02934f5f5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56bc7f18fbd299570490a28ca7d67689e9a42881e807e784cdd1f35dc9980b5d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f6b5fef33d461101a78af85b060592dfe6abf4574120e7a7d160e02934f5f5d"}
{"level":"debug","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f6b5fef33d461101a78af85b060592dfe6abf4574120e7a7d160e02934f5f5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:05:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:05:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f6b5fef33d461101a78af85b060592dfe6abf4574120e7a7d160e02934f5f5d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f6b5fef33d461101a78af85b060592dfe6abf4574120e7a7d160e02934f5f5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56bc7f18fbd299570490a28ca7d67689e9a42881e807e784cdd1f35dc9980b5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:05:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:05:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56bc7f18fbd299570490a28ca7d67689e9a42881e807e784cdd1f35dc9980b5d"}
{"level":"info","ts":"2026-07-13T18:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56bc7f18fbd299570490a28ca7d67689e9a42881e807e784cdd1f35dc9980b5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f6b5fef33d461101a78af85b060592dfe6abf4574120e7a7d160e02934f5f5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:05:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:05:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f6b5fef33d461101a78af85b060592dfe6abf4574120e7a7d160e02934f5f5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56bc7f18fbd299570490a28ca7d67689e9a42881e807e784cdd1f35dc9980b5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:05:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:05:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56bc7f18fbd299570490a28ca7d67689e9a42881e807e784cdd1f35dc9980b5d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f6b5fef33d461101a78af85b060592dfe6abf4574120e7a7d160e02934f5f5d"}
{"level":"info","ts":"2026-07-13T18:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56bc7f18fbd299570490a28ca7d67689e9a42881e807e784cdd1f35dc9980b5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f6b5fef33d461101a78af85b060592dfe6abf4574120e7a7d160e02934f5f5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:05:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:05:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f6b5fef33d461101a78af85b060592dfe6abf4574120e7a7d160e02934f5f5d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56bc7f18fbd299570490a28ca7d67689e9a42881e807e784cdd1f35dc9980b5d"}
{"level":"info","ts":"2026-07-13T18:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f6b5fef33d461101a78af85b060592dfe6abf4574120e7a7d160e02934f5f5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56bc7f18fbd299570490a28ca7d67689e9a42881e807e784cdd1f35dc9980b5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f6b5fef33d461101a78af85b060592dfe6abf4574120e7a7d160e02934f5f5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:05:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:05:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f6b5fef33d461101a78af85b060592dfe6abf4574120e7a7d160e02934f5f5d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f6b5fef33d461101a78af85b060592dfe6abf4574120e7a7d160e02934f5f5d"}
{"level":"debug","ts":"2026-07-13T18:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f6b5fef33d461101a78af85b060592dfe6abf4574120e7a7d160e02934f5f5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:05:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:05:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f6b5fef33d461101a78af85b060592dfe6abf4574120e7a7d160e02934f5f5d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f6b5fef33d461101a78af85b060592dfe6abf4574120e7a7d160e02934f5f5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f6b5fef33d461101a78af85b060592dfe6abf4574120e7a7d160e02934f5f5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:05:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:05:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f6b5fef33d461101a78af85b060592dfe6abf4574120e7a7d160e02934f5f5d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-13T18:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2f6b5fef33d461101a78af85b060592dfe6abf4574120e7a7d160e02934f5f5d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2f6b5fef33d461101a78af85b060592dfe6abf4574120e7a7d160e02934f5f5d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T18:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f6b5fef33d461101a78af85b060592dfe6abf4574120e7a7d160e02934f5f5d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56bc7f18fbd299570490a28ca7d67689e9a42881e807e784cdd1f35dc9980b5d"}
{"level":"debug","ts":"2026-07-13T18:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f6b5fef33d461101a78af85b060592dfe6abf4574120e7a7d160e02934f5f5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:05:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:05:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f6b5fef33d461101a78af85b060592dfe6abf4574120e7a7d160e02934f5f5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f6b5fef33d461101a78af85b060592dfe6abf4574120e7a7d160e02934f5f5d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f6b5fef33d461101a78af85b060592dfe6abf4574120e7a7d160e02934f5f5d"}
{"level":"debug","ts":"2026-07-13T18:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f6b5fef33d461101a78af85b060592dfe6abf4574120e7a7d160e02934f5f5d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f6b5fef33d461101a78af85b060592dfe6abf4574120e7a7d160e02934f5f5d"}
{"level":"debug","ts":"2026-07-13T18:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f6b5fef33d461101a78af85b060592dfe6abf4574120e7a7d160e02934f5f5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:05:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:05:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f6b5fef33d461101a78af85b060592dfe6abf4574120e7a7d160e02934f5f5d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f6b5fef33d461101a78af85b060592dfe6abf4574120e7a7d160e02934f5f5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f6b5fef33d461101a78af85b060592dfe6abf4574120e7a7d160e02934f5f5d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f6b5fef33d461101a78af85b060592dfe6abf4574120e7a7d160e02934f5f5d"}
{"level":"debug","ts":"2026-07-13T18:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:06:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:06:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6"}
{"level":"debug","ts":"2026-07-13T18:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6"}
{"level":"debug","ts":"2026-07-13T18:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:06:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:06:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:06:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:06:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6"}
{"level":"debug","ts":"2026-07-13T18:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6"}
{"level":"debug","ts":"2026-07-13T18:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:06:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:06:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:06:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:06:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6"}
{"level":"debug","ts":"2026-07-13T18:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6"}
{"level":"debug","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6"}
{"level":"debug","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6"}
{"level":"debug","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6"}
{"level":"debug","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6"}
{"level":"debug","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d43e02d292623a20811ba937e552e2406d1cc6df748cf70e184b374eac6eb12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6"}
{"level":"info","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d43e02d292623a20811ba937e552e2406d1cc6df748cf70e184b374eac6eb12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d43e02d292623a20811ba937e552e2406d1cc6df748cf70e184b374eac6eb12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d43e02d292623a20811ba937e552e2406d1cc6df748cf70e184b374eac6eb12"}
{"level":"info","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d43e02d292623a20811ba937e552e2406d1cc6df748cf70e184b374eac6eb12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6"}
{"level":"info","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d43e02d292623a20811ba937e552e2406d1cc6df748cf70e184b374eac6eb12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d43e02d292623a20811ba937e552e2406d1cc6df748cf70e184b374eac6eb12"}
{"level":"error","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d43e02d292623a20811ba937e552e2406d1cc6df748cf70e184b374eac6eb12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d43e02d292623a20811ba937e552e2406d1cc6df748cf70e184b374eac6eb12"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d43e02d292623a20811ba937e552e2406d1cc6df748cf70e184b374eac6eb12","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6"}
{"level":"debug","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d43e02d292623a20811ba937e552e2406d1cc6df748cf70e184b374eac6eb12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6"}
{"level":"debug","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d43e02d292623a20811ba937e552e2406d1cc6df748cf70e184b374eac6eb12"}
{"level":"debug","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54964b17152bd5ec1a26610bc7134937d66b64d8388ecf015b61a8ca03a108dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54964b17152bd5ec1a26610bc7134937d66b64d8388ecf015b61a8ca03a108dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54964b17152bd5ec1a26610bc7134937d66b64d8388ecf015b61a8ca03a108dc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6"}
{"level":"debug","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54964b17152bd5ec1a26610bc7134937d66b64d8388ecf015b61a8ca03a108dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54964b17152bd5ec1a26610bc7134937d66b64d8388ecf015b61a8ca03a108dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54964b17152bd5ec1a26610bc7134937d66b64d8388ecf015b61a8ca03a108dc"}
{"level":"info","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54964b17152bd5ec1a26610bc7134937d66b64d8388ecf015b61a8ca03a108dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54964b17152bd5ec1a26610bc7134937d66b64d8388ecf015b61a8ca03a108dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6"}
{"level":"info","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54964b17152bd5ec1a26610bc7134937d66b64d8388ecf015b61a8ca03a108dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54964b17152bd5ec1a26610bc7134937d66b64d8388ecf015b61a8ca03a108dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54964b17152bd5ec1a26610bc7134937d66b64d8388ecf015b61a8ca03a108dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54964b17152bd5ec1a26610bc7134937d66b64d8388ecf015b61a8ca03a108dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54964b17152bd5ec1a26610bc7134937d66b64d8388ecf015b61a8ca03a108dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54964b17152bd5ec1a26610bc7134937d66b64d8388ecf015b61a8ca03a108dc"}
{"level":"error","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"54964b17152bd5ec1a26610bc7134937d66b64d8388ecf015b61a8ca03a108dc","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"54964b17152bd5ec1a26610bc7134937d66b64d8388ecf015b61a8ca03a108dc\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54964b17152bd5ec1a26610bc7134937d66b64d8388ecf015b61a8ca03a108dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54964b17152bd5ec1a26610bc7134937d66b64d8388ecf015b61a8ca03a108dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54964b17152bd5ec1a26610bc7134937d66b64d8388ecf015b61a8ca03a108dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54964b17152bd5ec1a26610bc7134937d66b64d8388ecf015b61a8ca03a108dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54964b17152bd5ec1a26610bc7134937d66b64d8388ecf015b61a8ca03a108dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6"}
{"level":"error","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"54964b17152bd5ec1a26610bc7134937d66b64d8388ecf015b61a8ca03a108dc","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"54964b17152bd5ec1a26610bc7134937d66b64d8388ecf015b61a8ca03a108dc\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54964b17152bd5ec1a26610bc7134937d66b64d8388ecf015b61a8ca03a108dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54964b17152bd5ec1a26610bc7134937d66b64d8388ecf015b61a8ca03a108dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54964b17152bd5ec1a26610bc7134937d66b64d8388ecf015b61a8ca03a108dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54964b17152bd5ec1a26610bc7134937d66b64d8388ecf015b61a8ca03a108dc"}
{"level":"error","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"54964b17152bd5ec1a26610bc7134937d66b64d8388ecf015b61a8ca03a108dc","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"54964b17152bd5ec1a26610bc7134937d66b64d8388ecf015b61a8ca03a108dc\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54964b17152bd5ec1a26610bc7134937d66b64d8388ecf015b61a8ca03a108dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54964b17152bd5ec1a26610bc7134937d66b64d8388ecf015b61a8ca03a108dc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54964b17152bd5ec1a26610bc7134937d66b64d8388ecf015b61a8ca03a108dc"}
{"level":"debug","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff74793958bf7dadc1384220d814d0689e662212cb9de4be289cf8b4ca204615","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff74793958bf7dadc1384220d814d0689e662212cb9de4be289cf8b4ca204615","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54964b17152bd5ec1a26610bc7134937d66b64d8388ecf015b61a8ca03a108dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54964b17152bd5ec1a26610bc7134937d66b64d8388ecf015b61a8ca03a108dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff74793958bf7dadc1384220d814d0689e662212cb9de4be289cf8b4ca204615"}
{"level":"info","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54964b17152bd5ec1a26610bc7134937d66b64d8388ecf015b61a8ca03a108dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff74793958bf7dadc1384220d814d0689e662212cb9de4be289cf8b4ca204615","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54964b17152bd5ec1a26610bc7134937d66b64d8388ecf015b61a8ca03a108dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff74793958bf7dadc1384220d814d0689e662212cb9de4be289cf8b4ca204615","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff74793958bf7dadc1384220d814d0689e662212cb9de4be289cf8b4ca204615"}
{"level":"debug","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff74793958bf7dadc1384220d814d0689e662212cb9de4be289cf8b4ca204615","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff74793958bf7dadc1384220d814d0689e662212cb9de4be289cf8b4ca204615"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54964b17152bd5ec1a26610bc7134937d66b64d8388ecf015b61a8ca03a108dc"}
{"level":"info","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff74793958bf7dadc1384220d814d0689e662212cb9de4be289cf8b4ca204615","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff74793958bf7dadc1384220d814d0689e662212cb9de4be289cf8b4ca204615","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff74793958bf7dadc1384220d814d0689e662212cb9de4be289cf8b4ca204615","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff74793958bf7dadc1384220d814d0689e662212cb9de4be289cf8b4ca204615","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff74793958bf7dadc1384220d814d0689e662212cb9de4be289cf8b4ca204615","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff74793958bf7dadc1384220d814d0689e662212cb9de4be289cf8b4ca204615"}
{"level":"debug","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e7509bdba93dda4e30b66a21a903e87460b80c6bb992a14283b398e422db557","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e7509bdba93dda4e30b66a21a903e87460b80c6bb992a14283b398e422db557","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff74793958bf7dadc1384220d814d0689e662212cb9de4be289cf8b4ca204615","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e7509bdba93dda4e30b66a21a903e87460b80c6bb992a14283b398e422db557","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff74793958bf7dadc1384220d814d0689e662212cb9de4be289cf8b4ca204615"}
{"level":"debug","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e7509bdba93dda4e30b66a21a903e87460b80c6bb992a14283b398e422db557","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e7509bdba93dda4e30b66a21a903e87460b80c6bb992a14283b398e422db557","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e7509bdba93dda4e30b66a21a903e87460b80c6bb992a14283b398e422db557","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e7509bdba93dda4e30b66a21a903e87460b80c6bb992a14283b398e422db557"}
{"level":"debug","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e7509bdba93dda4e30b66a21a903e87460b80c6bb992a14283b398e422db557","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff74793958bf7dadc1384220d814d0689e662212cb9de4be289cf8b4ca204615","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff74793958bf7dadc1384220d814d0689e662212cb9de4be289cf8b4ca204615"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e7509bdba93dda4e30b66a21a903e87460b80c6bb992a14283b398e422db557"}
{"level":"info","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff74793958bf7dadc1384220d814d0689e662212cb9de4be289cf8b4ca204615","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff74793958bf7dadc1384220d814d0689e662212cb9de4be289cf8b4ca204615","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff74793958bf7dadc1384220d814d0689e662212cb9de4be289cf8b4ca204615","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff74793958bf7dadc1384220d814d0689e662212cb9de4be289cf8b4ca204615","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff74793958bf7dadc1384220d814d0689e662212cb9de4be289cf8b4ca204615","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff74793958bf7dadc1384220d814d0689e662212cb9de4be289cf8b4ca204615"}
{"level":"debug","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5102d027e4413955d8f966ee60ff9ba408e4b0aef80a80e5859ba226d350cea3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5102d027e4413955d8f966ee60ff9ba408e4b0aef80a80e5859ba226d350cea3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0640d9f9b53261ea8412284ca220c63b3d35f96ff6415563ac6a3b214b86466a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff74793958bf7dadc1384220d814d0689e662212cb9de4be289cf8b4ca204615"}
{"level":"info","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0640d9f9b53261ea8412284ca220c63b3d35f96ff6415563ac6a3b214b86466a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5102d027e4413955d8f966ee60ff9ba408e4b0aef80a80e5859ba226d350cea3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5102d027e4413955d8f966ee60ff9ba408e4b0aef80a80e5859ba226d350cea3"}
{"level":"info","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5102d027e4413955d8f966ee60ff9ba408e4b0aef80a80e5859ba226d350cea3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff74793958bf7dadc1384220d814d0689e662212cb9de4be289cf8b4ca204615","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff74793958bf7dadc1384220d814d0689e662212cb9de4be289cf8b4ca204615"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0640d9f9b53261ea8412284ca220c63b3d35f96ff6415563ac6a3b214b86466a"}
{"level":"info","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff74793958bf7dadc1384220d814d0689e662212cb9de4be289cf8b4ca204615","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0640d9f9b53261ea8412284ca220c63b3d35f96ff6415563ac6a3b214b86466a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0640d9f9b53261ea8412284ca220c63b3d35f96ff6415563ac6a3b214b86466a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0640d9f9b53261ea8412284ca220c63b3d35f96ff6415563ac6a3b214b86466a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e7509bdba93dda4e30b66a21a903e87460b80c6bb992a14283b398e422db557","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e7509bdba93dda4e30b66a21a903e87460b80c6bb992a14283b398e422db557"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5102d027e4413955d8f966ee60ff9ba408e4b0aef80a80e5859ba226d350cea3"}
{"level":"info","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e7509bdba93dda4e30b66a21a903e87460b80c6bb992a14283b398e422db557","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5102d027e4413955d8f966ee60ff9ba408e4b0aef80a80e5859ba226d350cea3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5102d027e4413955d8f966ee60ff9ba408e4b0aef80a80e5859ba226d350cea3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff74793958bf7dadc1384220d814d0689e662212cb9de4be289cf8b4ca204615"}
{"level":"info","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5102d027e4413955d8f966ee60ff9ba408e4b0aef80a80e5859ba226d350cea3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff74793958bf7dadc1384220d814d0689e662212cb9de4be289cf8b4ca204615","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0640d9f9b53261ea8412284ca220c63b3d35f96ff6415563ac6a3b214b86466a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0640d9f9b53261ea8412284ca220c63b3d35f96ff6415563ac6a3b214b86466a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e7509bdba93dda4e30b66a21a903e87460b80c6bb992a14283b398e422db557","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5102d027e4413955d8f966ee60ff9ba408e4b0aef80a80e5859ba226d350cea3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0640d9f9b53261ea8412284ca220c63b3d35f96ff6415563ac6a3b214b86466a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0640d9f9b53261ea8412284ca220c63b3d35f96ff6415563ac6a3b214b86466a"}
{"level":"debug","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0640d9f9b53261ea8412284ca220c63b3d35f96ff6415563ac6a3b214b86466a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:06:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0640d9f9b53261ea8412284ca220c63b3d35f96ff6415563ac6a3b214b86466a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0640d9f9b53261ea8412284ca220c63b3d35f96ff6415563ac6a3b214b86466a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0640d9f9b53261ea8412284ca220c63b3d35f96ff6415563ac6a3b214b86466a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e7509bdba93dda4e30b66a21a903e87460b80c6bb992a14283b398e422db557"}
{"level":"info","ts":"2026-07-13T18:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5102d027e4413955d8f966ee60ff9ba408e4b0aef80a80e5859ba226d350cea3"}
{"level":"info","ts":"2026-07-13T18:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0640d9f9b53261ea8412284ca220c63b3d35f96ff6415563ac6a3b214b86466a"}
{"level":"debug","ts":"2026-07-13T18:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63040648c73da05750a5d771c1435d0833c4c457a830ac46915ffb93eda39108","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:06:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:06:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63040648c73da05750a5d771c1435d0833c4c457a830ac46915ffb93eda39108","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63040648c73da05750a5d771c1435d0833c4c457a830ac46915ffb93eda39108","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63040648c73da05750a5d771c1435d0833c4c457a830ac46915ffb93eda39108"}
{"level":"debug","ts":"2026-07-13T18:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63040648c73da05750a5d771c1435d0833c4c457a830ac46915ffb93eda39108","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:06:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:06:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63040648c73da05750a5d771c1435d0833c4c457a830ac46915ffb93eda39108"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63040648c73da05750a5d771c1435d0833c4c457a830ac46915ffb93eda39108","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63040648c73da05750a5d771c1435d0833c4c457a830ac46915ffb93eda39108","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:06:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:06:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63040648c73da05750a5d771c1435d0833c4c457a830ac46915ffb93eda39108"}
{"level":"info","ts":"2026-07-13T18:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63040648c73da05750a5d771c1435d0833c4c457a830ac46915ffb93eda39108","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63040648c73da05750a5d771c1435d0833c4c457a830ac46915ffb93eda39108","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63040648c73da05750a5d771c1435d0833c4c457a830ac46915ffb93eda39108","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63040648c73da05750a5d771c1435d0833c4c457a830ac46915ffb93eda39108"}
{"level":"debug","ts":"2026-07-13T18:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63040648c73da05750a5d771c1435d0833c4c457a830ac46915ffb93eda39108","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63040648c73da05750a5d771c1435d0833c4c457a830ac46915ffb93eda39108"}
{"level":"debug","ts":"2026-07-13T18:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63040648c73da05750a5d771c1435d0833c4c457a830ac46915ffb93eda39108","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:06:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:06:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63040648c73da05750a5d771c1435d0833c4c457a830ac46915ffb93eda39108"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63040648c73da05750a5d771c1435d0833c4c457a830ac46915ffb93eda39108","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63040648c73da05750a5d771c1435d0833c4c457a830ac46915ffb93eda39108","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:06:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:06:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63040648c73da05750a5d771c1435d0833c4c457a830ac46915ffb93eda39108","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63040648c73da05750a5d771c1435d0833c4c457a830ac46915ffb93eda39108","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63040648c73da05750a5d771c1435d0833c4c457a830ac46915ffb93eda39108"}
{"level":"debug","ts":"2026-07-13T18:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63040648c73da05750a5d771c1435d0833c4c457a830ac46915ffb93eda39108","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63040648c73da05750a5d771c1435d0833c4c457a830ac46915ffb93eda39108","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63040648c73da05750a5d771c1435d0833c4c457a830ac46915ffb93eda39108"}
{"level":"debug","ts":"2026-07-13T18:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63040648c73da05750a5d771c1435d0833c4c457a830ac46915ffb93eda39108","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:06:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:06:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63040648c73da05750a5d771c1435d0833c4c457a830ac46915ffb93eda39108"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63040648c73da05750a5d771c1435d0833c4c457a830ac46915ffb93eda39108","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63040648c73da05750a5d771c1435d0833c4c457a830ac46915ffb93eda39108","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:06:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:06:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63040648c73da05750a5d771c1435d0833c4c457a830ac46915ffb93eda39108","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63040648c73da05750a5d771c1435d0833c4c457a830ac46915ffb93eda39108","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63040648c73da05750a5d771c1435d0833c4c457a830ac46915ffb93eda39108","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63040648c73da05750a5d771c1435d0833c4c457a830ac46915ffb93eda39108"}
{"level":"debug","ts":"2026-07-13T18:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63040648c73da05750a5d771c1435d0833c4c457a830ac46915ffb93eda39108","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63040648c73da05750a5d771c1435d0833c4c457a830ac46915ffb93eda39108"}
{"level":"debug","ts":"2026-07-13T18:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63040648c73da05750a5d771c1435d0833c4c457a830ac46915ffb93eda39108","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:06:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:06:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63040648c73da05750a5d771c1435d0833c4c457a830ac46915ffb93eda39108"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63040648c73da05750a5d771c1435d0833c4c457a830ac46915ffb93eda39108","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63040648c73da05750a5d771c1435d0833c4c457a830ac46915ffb93eda39108","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63040648c73da05750a5d771c1435d0833c4c457a830ac46915ffb93eda39108"}
{"level":"debug","ts":"2026-07-13T18:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6"}
{"level":"debug","ts":"2026-07-13T18:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c216124eadcff54789a0fb23354d358b2acf6b056141f11b6aaf631464e773a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:06:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:06:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c216124eadcff54789a0fb23354d358b2acf6b056141f11b6aaf631464e773a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c216124eadcff54789a0fb23354d358b2acf6b056141f11b6aaf631464e773a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c216124eadcff54789a0fb23354d358b2acf6b056141f11b6aaf631464e773a1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c216124eadcff54789a0fb23354d358b2acf6b056141f11b6aaf631464e773a1"}
{"level":"debug","ts":"2026-07-13T18:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c216124eadcff54789a0fb23354d358b2acf6b056141f11b6aaf631464e773a1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c216124eadcff54789a0fb23354d358b2acf6b056141f11b6aaf631464e773a1"}
{"level":"debug","ts":"2026-07-13T18:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c216124eadcff54789a0fb23354d358b2acf6b056141f11b6aaf631464e773a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:06:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:06:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c216124eadcff54789a0fb23354d358b2acf6b056141f11b6aaf631464e773a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c216124eadcff54789a0fb23354d358b2acf6b056141f11b6aaf631464e773a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c216124eadcff54789a0fb23354d358b2acf6b056141f11b6aaf631464e773a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d43e02d292623a20811ba937e552e2406d1cc6df748cf70e184b374eac6eb12","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c216124eadcff54789a0fb23354d358b2acf6b056141f11b6aaf631464e773a1"}
{"level":"info","ts":"2026-07-13T18:06:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d43e02d292623a20811ba937e552e2406d1cc6df748cf70e184b374eac6eb12"}
{"level":"debug","ts":"2026-07-13T18:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc928132af03242d4c18c6705952c307130e43eb5c364a2658b52a4e5fce94a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:06:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:06:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc928132af03242d4c18c6705952c307130e43eb5c364a2658b52a4e5fce94a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc928132af03242d4c18c6705952c307130e43eb5c364a2658b52a4e5fce94a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc928132af03242d4c18c6705952c307130e43eb5c364a2658b52a4e5fce94a7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc928132af03242d4c18c6705952c307130e43eb5c364a2658b52a4e5fce94a7"}
{"level":"info","ts":"2026-07-13T18:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc928132af03242d4c18c6705952c307130e43eb5c364a2658b52a4e5fce94a7"}
{"level":"debug","ts":"2026-07-13T18:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc928132af03242d4c18c6705952c307130e43eb5c364a2658b52a4e5fce94a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:06:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:06:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc928132af03242d4c18c6705952c307130e43eb5c364a2658b52a4e5fce94a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc928132af03242d4c18c6705952c307130e43eb5c364a2658b52a4e5fce94a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc928132af03242d4c18c6705952c307130e43eb5c364a2658b52a4e5fce94a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:06:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:06:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc928132af03242d4c18c6705952c307130e43eb5c364a2658b52a4e5fce94a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc928132af03242d4c18c6705952c307130e43eb5c364a2658b52a4e5fce94a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc928132af03242d4c18c6705952c307130e43eb5c364a2658b52a4e5fce94a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc928132af03242d4c18c6705952c307130e43eb5c364a2658b52a4e5fce94a7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc928132af03242d4c18c6705952c307130e43eb5c364a2658b52a4e5fce94a7"}
{"level":"debug","ts":"2026-07-13T18:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc928132af03242d4c18c6705952c307130e43eb5c364a2658b52a4e5fce94a7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc928132af03242d4c18c6705952c307130e43eb5c364a2658b52a4e5fce94a7"}
{"level":"debug","ts":"2026-07-13T18:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5102d027e4413955d8f966ee60ff9ba408e4b0aef80a80e5859ba226d350cea3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:06:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:06:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5102d027e4413955d8f966ee60ff9ba408e4b0aef80a80e5859ba226d350cea3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5102d027e4413955d8f966ee60ff9ba408e4b0aef80a80e5859ba226d350cea3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5102d027e4413955d8f966ee60ff9ba408e4b0aef80a80e5859ba226d350cea3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc928132af03242d4c18c6705952c307130e43eb5c364a2658b52a4e5fce94a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:06:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:06:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc928132af03242d4c18c6705952c307130e43eb5c364a2658b52a4e5fce94a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5102d027e4413955d8f966ee60ff9ba408e4b0aef80a80e5859ba226d350cea3"}
{"level":"info","ts":"2026-07-13T18:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc928132af03242d4c18c6705952c307130e43eb5c364a2658b52a4e5fce94a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc928132af03242d4c18c6705952c307130e43eb5c364a2658b52a4e5fce94a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5102d027e4413955d8f966ee60ff9ba408e4b0aef80a80e5859ba226d350cea3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5102d027e4413955d8f966ee60ff9ba408e4b0aef80a80e5859ba226d350cea3"}
{"level":"info","ts":"2026-07-13T18:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc928132af03242d4c18c6705952c307130e43eb5c364a2658b52a4e5fce94a7"}
{"level":"debug","ts":"2026-07-13T18:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5102d027e4413955d8f966ee60ff9ba408e4b0aef80a80e5859ba226d350cea3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:06:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:06:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5102d027e4413955d8f966ee60ff9ba408e4b0aef80a80e5859ba226d350cea3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5102d027e4413955d8f966ee60ff9ba408e4b0aef80a80e5859ba226d350cea3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5102d027e4413955d8f966ee60ff9ba408e4b0aef80a80e5859ba226d350cea3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5102d027e4413955d8f966ee60ff9ba408e4b0aef80a80e5859ba226d350cea3"}
{"level":"debug","ts":"2026-07-13T18:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34f2a54846c06f19022727f634be5c948928a1e098a29d4e9e81087e78cad116","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:06:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:06:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34f2a54846c06f19022727f634be5c948928a1e098a29d4e9e81087e78cad116","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34f2a54846c06f19022727f634be5c948928a1e098a29d4e9e81087e78cad116","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34f2a54846c06f19022727f634be5c948928a1e098a29d4e9e81087e78cad116","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34f2a54846c06f19022727f634be5c948928a1e098a29d4e9e81087e78cad116"}
{"level":"debug","ts":"2026-07-13T18:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34f2a54846c06f19022727f634be5c948928a1e098a29d4e9e81087e78cad116","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34f2a54846c06f19022727f634be5c948928a1e098a29d4e9e81087e78cad116"}
{"level":"debug","ts":"2026-07-13T18:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34f2a54846c06f19022727f634be5c948928a1e098a29d4e9e81087e78cad116","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:06:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:06:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34f2a54846c06f19022727f634be5c948928a1e098a29d4e9e81087e78cad116"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34f2a54846c06f19022727f634be5c948928a1e098a29d4e9e81087e78cad116","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34f2a54846c06f19022727f634be5c948928a1e098a29d4e9e81087e78cad116","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:06:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:06:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34f2a54846c06f19022727f634be5c948928a1e098a29d4e9e81087e78cad116","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0640d9f9b53261ea8412284ca220c63b3d35f96ff6415563ac6a3b214b86466a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34f2a54846c06f19022727f634be5c948928a1e098a29d4e9e81087e78cad116","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34f2a54846c06f19022727f634be5c948928a1e098a29d4e9e81087e78cad116","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34f2a54846c06f19022727f634be5c948928a1e098a29d4e9e81087e78cad116"}
{"level":"debug","ts":"2026-07-13T18:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb468b6eeda307f4cf04d62ddc3e92bffac6d092642e1f1fc8601045c17fd6de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34f2a54846c06f19022727f634be5c948928a1e098a29d4e9e81087e78cad116","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:06:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:06:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34f2a54846c06f19022727f634be5c948928a1e098a29d4e9e81087e78cad116"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0640d9f9b53261ea8412284ca220c63b3d35f96ff6415563ac6a3b214b86466a"}
{"level":"info","ts":"2026-07-13T18:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34f2a54846c06f19022727f634be5c948928a1e098a29d4e9e81087e78cad116","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34f2a54846c06f19022727f634be5c948928a1e098a29d4e9e81087e78cad116","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:06:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:06:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34f2a54846c06f19022727f634be5c948928a1e098a29d4e9e81087e78cad116"}
{"level":"info","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34f2a54846c06f19022727f634be5c948928a1e098a29d4e9e81087e78cad116","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34f2a54846c06f19022727f634be5c948928a1e098a29d4e9e81087e78cad116","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:06:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:06:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34f2a54846c06f19022727f634be5c948928a1e098a29d4e9e81087e78cad116"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34f2a54846c06f19022727f634be5c948928a1e098a29d4e9e81087e78cad116","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34f2a54846c06f19022727f634be5c948928a1e098a29d4e9e81087e78cad116","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:06:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:06:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34f2a54846c06f19022727f634be5c948928a1e098a29d4e9e81087e78cad116"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb468b6eeda307f4cf04d62ddc3e92bffac6d092642e1f1fc8601045c17fd6de"}
{"level":"error","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"34f2a54846c06f19022727f634be5c948928a1e098a29d4e9e81087e78cad116","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"34f2a54846c06f19022727f634be5c948928a1e098a29d4e9e81087e78cad116\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34f2a54846c06f19022727f634be5c948928a1e098a29d4e9e81087e78cad116","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:06:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:06:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34f2a54846c06f19022727f634be5c948928a1e098a29d4e9e81087e78cad116","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34f2a54846c06f19022727f634be5c948928a1e098a29d4e9e81087e78cad116","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:06:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:06:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34f2a54846c06f19022727f634be5c948928a1e098a29d4e9e81087e78cad116"}
{"level":"error","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"34f2a54846c06f19022727f634be5c948928a1e098a29d4e9e81087e78cad116","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"34f2a54846c06f19022727f634be5c948928a1e098a29d4e9e81087e78cad116\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34f2a54846c06f19022727f634be5c948928a1e098a29d4e9e81087e78cad116","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34f2a54846c06f19022727f634be5c948928a1e098a29d4e9e81087e78cad116","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34f2a54846c06f19022727f634be5c948928a1e098a29d4e9e81087e78cad116"}
{"level":"debug","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34f2a54846c06f19022727f634be5c948928a1e098a29d4e9e81087e78cad116","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:06:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:06:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34f2a54846c06f19022727f634be5c948928a1e098a29d4e9e81087e78cad116"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34f2a54846c06f19022727f634be5c948928a1e098a29d4e9e81087e78cad116","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1975fff45f9590bb64062446ce09dc4fa99dc910654539b55a92d9567cb6fbff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:06:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:06:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1975fff45f9590bb64062446ce09dc4fa99dc910654539b55a92d9567cb6fbff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34f2a54846c06f19022727f634be5c948928a1e098a29d4e9e81087e78cad116","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1975fff45f9590bb64062446ce09dc4fa99dc910654539b55a92d9567cb6fbff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1975fff45f9590bb64062446ce09dc4fa99dc910654539b55a92d9567cb6fbff"}
{"level":"debug","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1975fff45f9590bb64062446ce09dc4fa99dc910654539b55a92d9567cb6fbff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:06:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:06:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1975fff45f9590bb64062446ce09dc4fa99dc910654539b55a92d9567cb6fbff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1975fff45f9590bb64062446ce09dc4fa99dc910654539b55a92d9567cb6fbff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1975fff45f9590bb64062446ce09dc4fa99dc910654539b55a92d9567cb6fbff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34f2a54846c06f19022727f634be5c948928a1e098a29d4e9e81087e78cad116"}
{"level":"info","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1975fff45f9590bb64062446ce09dc4fa99dc910654539b55a92d9567cb6fbff"}
{"level":"debug","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d07bb02649cc1a82fad657a759e85d29981c866f0914389b750a419e48c73514","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d07bb02649cc1a82fad657a759e85d29981c866f0914389b750a419e48c73514"}
{"level":"debug","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79d49edac2db1014f3090d51a543777010688b14851a37bf084ddd5299b75413","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:06:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:06:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79d49edac2db1014f3090d51a543777010688b14851a37bf084ddd5299b75413","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79d49edac2db1014f3090d51a543777010688b14851a37bf084ddd5299b75413","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79d49edac2db1014f3090d51a543777010688b14851a37bf084ddd5299b75413","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89fdf929eff6a6b1c1569cc7263c619a41b978276451b7001ae8e7bd2ffa1003","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79d49edac2db1014f3090d51a543777010688b14851a37bf084ddd5299b75413"}
{"level":"debug","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79d49edac2db1014f3090d51a543777010688b14851a37bf084ddd5299b75413","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:06:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:06:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79d49edac2db1014f3090d51a543777010688b14851a37bf084ddd5299b75413"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89fdf929eff6a6b1c1569cc7263c619a41b978276451b7001ae8e7bd2ffa1003"}
{"level":"info","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79d49edac2db1014f3090d51a543777010688b14851a37bf084ddd5299b75413","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79d49edac2db1014f3090d51a543777010688b14851a37bf084ddd5299b75413","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:06:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:06:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79d49edac2db1014f3090d51a543777010688b14851a37bf084ddd5299b75413"}
{"level":"info","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79d49edac2db1014f3090d51a543777010688b14851a37bf084ddd5299b75413","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79d49edac2db1014f3090d51a543777010688b14851a37bf084ddd5299b75413","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79d49edac2db1014f3090d51a543777010688b14851a37bf084ddd5299b75413","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79d49edac2db1014f3090d51a543777010688b14851a37bf084ddd5299b75413"}
{"level":"debug","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79d49edac2db1014f3090d51a543777010688b14851a37bf084ddd5299b75413","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"208855e9b86067955f9a6fef2aba575418879330c21dd43a4eb33793fa0fde47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79d49edac2db1014f3090d51a543777010688b14851a37bf084ddd5299b75413"}
{"level":"info","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/208855e9b86067955f9a6fef2aba575418879330c21dd43a4eb33793fa0fde47"}
{"level":"debug","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79d49edac2db1014f3090d51a543777010688b14851a37bf084ddd5299b75413","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:06:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:06:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79d49edac2db1014f3090d51a543777010688b14851a37bf084ddd5299b75413"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79d49edac2db1014f3090d51a543777010688b14851a37bf084ddd5299b75413","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79d49edac2db1014f3090d51a543777010688b14851a37bf084ddd5299b75413","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79d49edac2db1014f3090d51a543777010688b14851a37bf084ddd5299b75413"}
{"level":"debug","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e7509bdba93dda4e30b66a21a903e87460b80c6bb992a14283b398e422db557","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:06:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:06:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e7509bdba93dda4e30b66a21a903e87460b80c6bb992a14283b398e422db557","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e7509bdba93dda4e30b66a21a903e87460b80c6bb992a14283b398e422db557","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e7509bdba93dda4e30b66a21a903e87460b80c6bb992a14283b398e422db557","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e7509bdba93dda4e30b66a21a903e87460b80c6bb992a14283b398e422db557"}
{"level":"debug","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e7509bdba93dda4e30b66a21a903e87460b80c6bb992a14283b398e422db557","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e7509bdba93dda4e30b66a21a903e87460b80c6bb992a14283b398e422db557"}
{"level":"debug","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e7509bdba93dda4e30b66a21a903e87460b80c6bb992a14283b398e422db557","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:06:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:06:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e7509bdba93dda4e30b66a21a903e87460b80c6bb992a14283b398e422db557"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e7509bdba93dda4e30b66a21a903e87460b80c6bb992a14283b398e422db557","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e7509bdba93dda4e30b66a21a903e87460b80c6bb992a14283b398e422db557","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:06:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:06:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e7509bdba93dda4e30b66a21a903e87460b80c6bb992a14283b398e422db557","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b869053897499a026debd6c1764c13283384aa2674731bf53db68acde5cbf3de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e7509bdba93dda4e30b66a21a903e87460b80c6bb992a14283b398e422db557","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a2965aef3b7c2070a147b46e8814f5e0947cdbd04f47e55191ef4931e36aa19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e7509bdba93dda4e30b66a21a903e87460b80c6bb992a14283b398e422db557","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e7509bdba93dda4e30b66a21a903e87460b80c6bb992a14283b398e422db557"}
{"level":"debug","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e7509bdba93dda4e30b66a21a903e87460b80c6bb992a14283b398e422db557","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:06:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:06:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e7509bdba93dda4e30b66a21a903e87460b80c6bb992a14283b398e422db557"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b869053897499a026debd6c1764c13283384aa2674731bf53db68acde5cbf3de"}
{"level":"info","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e7509bdba93dda4e30b66a21a903e87460b80c6bb992a14283b398e422db557","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e7509bdba93dda4e30b66a21a903e87460b80c6bb992a14283b398e422db557","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a2965aef3b7c2070a147b46e8814f5e0947cdbd04f47e55191ef4931e36aa19"}
{"level":"info","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e7509bdba93dda4e30b66a21a903e87460b80c6bb992a14283b398e422db557"}
{"level":"debug","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff74793958bf7dadc1384220d814d0689e662212cb9de4be289cf8b4ca204615","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:06:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:06:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff74793958bf7dadc1384220d814d0689e662212cb9de4be289cf8b4ca204615","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff74793958bf7dadc1384220d814d0689e662212cb9de4be289cf8b4ca204615","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56bc7f18fbd299570490a28ca7d67689e9a42881e807e784cdd1f35dc9980b5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff74793958bf7dadc1384220d814d0689e662212cb9de4be289cf8b4ca204615","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff74793958bf7dadc1384220d814d0689e662212cb9de4be289cf8b4ca204615"}
{"level":"debug","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff74793958bf7dadc1384220d814d0689e662212cb9de4be289cf8b4ca204615","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:06:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:06:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff74793958bf7dadc1384220d814d0689e662212cb9de4be289cf8b4ca204615"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56bc7f18fbd299570490a28ca7d67689e9a42881e807e784cdd1f35dc9980b5d"}
{"level":"info","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff74793958bf7dadc1384220d814d0689e662212cb9de4be289cf8b4ca204615","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff74793958bf7dadc1384220d814d0689e662212cb9de4be289cf8b4ca204615","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T18:06:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T18:06:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff74793958bf7dadc1384220d814d0689e662212cb9de4be289cf8b4ca204615"}
{"level":"info","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff74793958bf7dadc1384220d814d0689e662212cb9de4be289cf8b4ca204615","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff74793958bf7dadc1384220d814d0689e662212cb9de4be289cf8b4ca204615","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff74793958bf7dadc1384220d814d0689e662212cb9de4be289cf8b4ca204615","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff74793958bf7dadc1384220d814d0689e662212cb9de4be289cf8b4ca204615"}
{"level":"debug","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f6b5fef33d461101a78af85b060592dfe6abf4574120e7a7d160e02934f5f5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff74793958bf7dadc1384220d814d0689e662212cb9de4be289cf8b4ca204615","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff74793958bf7dadc1384220d814d0689e662212cb9de4be289cf8b4ca204615"}
{"level":"debug","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54964b17152bd5ec1a26610bc7134937d66b64d8388ecf015b61a8ca03a108dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63040648c73da05750a5d771c1435d0833c4c457a830ac46915ffb93eda39108","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f6b5fef33d461101a78af85b060592dfe6abf4574120e7a7d160e02934f5f5d"}
{"level":"debug","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff74793958bf7dadc1384220d814d0689e662212cb9de4be289cf8b4ca204615","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T18:06:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T18:06:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff74793958bf7dadc1384220d814d0689e662212cb9de4be289cf8b4ca204615"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54964b17152bd5ec1a26610bc7134937d66b64d8388ecf015b61a8ca03a108dc"}
{"level":"info","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff74793958bf7dadc1384220d814d0689e662212cb9de4be289cf8b4ca204615","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db7f11d7eddbb541b33ea26c7e3bad0bf758275f3bbbf245bef49d18cf35d511","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff74793958bf7dadc1384220d814d0689e662212cb9de4be289cf8b4ca204615","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63040648c73da05750a5d771c1435d0833c4c457a830ac46915ffb93eda39108"}
{"level":"info","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db7f11d7eddbb541b33ea26c7e3bad0bf758275f3bbbf245bef49d18cf35d511"}
{"level":"debug","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"103e1e43d493a572eb27ef2ad721209fb5c19ba4a18dcb3a6ab9a78624b2d187","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a6339d21620610bfa04639f26a00e7fe569c929a38e1d32497951a4decc2288","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff74793958bf7dadc1384220d814d0689e662212cb9de4be289cf8b4ca204615"}
{"level":"info","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/103e1e43d493a572eb27ef2ad721209fb5c19ba4a18dcb3a6ab9a78624b2d187"}
{"level":"info","ts":"2026-07-13T18:06:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a6339d21620610bfa04639f26a00e7fe569c929a38e1d32497951a4decc2288"}
{"level":"info","ts":"2026-07-13T18:06:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7488061e-52a6-4c1a-b9b5-b9e203847d78","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:59288","PortSpecifier":{"PortValue":59288}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7488061e-52a6-4c1a-b9b5-b9e203847d78","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f54db3.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:06:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7488061e-52a6-4c1a-b9b5-b9e203847d78","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:59288","PortSpecifier":{"PortValue":59288}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783966016,"nanos":933061737},"http":{"id":"7488061e-52a6-4c1a-b9b5-b9e203847d78","method":"POST","headers":{":authority":"e2e-shared-a-f54db3.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:06:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7488061e-52a6-4c1a-b9b5-b9e203847d78","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T18:06:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7488061e-52a6-4c1a-b9b5-b9e203847d78","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"aed4c252-5d29-4cf0-9404-468616a85f89","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e61dd9bf-ddf3-4b22-a82f-c5020a72ba79"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/132ce6b0ec12"]}}
{"level":"debug","ts":"2026-07-13T18:06:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7488061e-52a6-4c1a-b9b5-b9e203847d78","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/132ce6b0ec12"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e61dd9bf-ddf3-4b22-a82f-c5020a72ba79"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"aed4c252-5d29-4cf0-9404-468616a85f89","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4a6339d21620610bfa04639f26a00e7fe569c929a38e1d32497951a4decc2288"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f54db3.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:06:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7488061e-52a6-4c1a-b9b5-b9e203847d78","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:06:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7488061e-52a6-4c1a-b9b5-b9e203847d78","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:06:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7488061e-52a6-4c1a-b9b5-b9e203847d78","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f54db3/rate-test-model-f54db3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:06:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7488061e-52a6-4c1a-b9b5-b9e203847d78","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T18:06:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7488061e-52a6-4c1a-b9b5-b9e203847d78","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T18:06:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7488061e-52a6-4c1a-b9b5-b9e203847d78","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T18:06:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7488061e-52a6-4c1a-b9b5-b9e203847d78","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:06:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7488061e-52a6-4c1a-b9b5-b9e203847d78","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:06:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"21e63ba7-82ca-403f-b693-33b534028ee7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:41596","PortSpecifier":{"PortValue":41596}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"21e63ba7-82ca-403f-b693-33b534028ee7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b57346.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:06:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"21e63ba7-82ca-403f-b693-33b534028ee7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:41596","PortSpecifier":{"PortValue":41596}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783966016,"nanos":977371379},"http":{"id":"21e63ba7-82ca-403f-b693-33b534028ee7","method":"POST","headers":{":authority":"e2e-shared-b-b57346.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:06:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"21e63ba7-82ca-403f-b693-33b534028ee7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T18:06:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"21e63ba7-82ca-403f-b693-33b534028ee7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"aed4c252-5d29-4cf0-9404-468616a85f89","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e61dd9bf-ddf3-4b22-a82f-c5020a72ba79"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/132ce6b0ec12"]}}
{"level":"debug","ts":"2026-07-13T18:06:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"21e63ba7-82ca-403f-b693-33b534028ee7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/132ce6b0ec12"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e61dd9bf-ddf3-4b22-a82f-c5020a72ba79"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"aed4c252-5d29-4cf0-9404-468616a85f89","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7a2965aef3b7c2070a147b46e8814f5e0947cdbd04f47e55191ef4931e36aa19"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b57346.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:06:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21e63ba7-82ca-403f-b693-33b534028ee7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:06:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21e63ba7-82ca-403f-b693-33b534028ee7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:06:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21e63ba7-82ca-403f-b693-33b534028ee7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b57346/rate-test-model-b57346\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:06:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"21e63ba7-82ca-403f-b693-33b534028ee7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T18:06:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21e63ba7-82ca-403f-b693-33b534028ee7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T18:06:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21e63ba7-82ca-403f-b693-33b534028ee7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T18:06:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"21e63ba7-82ca-403f-b693-33b534028ee7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:06:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"21e63ba7-82ca-403f-b693-33b534028ee7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:06:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"238db7e0-562d-4915-92b6-60c444dde580","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:59304","PortSpecifier":{"PortValue":59304}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"238db7e0-562d-4915-92b6-60c444dde580","method":"POST","path":"/ai-tenant-e2e-shared-a-f54db3/rate-test-model-f54db3/v1/completions","host":"e2e-shared-a-f54db3.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:06:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"238db7e0-562d-4915-92b6-60c444dde580","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:59304","PortSpecifier":{"PortValue":59304}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783966017,"nanos":19016259},"http":{"id":"238db7e0-562d-4915-92b6-60c444dde580","method":"POST","headers":{":authority":"e2e-shared-a-f54db3.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f54db3/rate-test-model-f54db3/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:06:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"238db7e0-562d-4915-92b6-60c444dde580","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-DjZOwQ8M8oKiLjFc_yB9hdCEdjJVX2HVpcxB0eIzswn9Fx7HauAk6ho1mdiJ"}
{"level":"debug","ts":"2026-07-13T18:06:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"238db7e0-562d-4915-92b6-60c444dde580","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f54db3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-DjZOwQ8M8oKiLjFc_yB9hdCEdjJVX2HVpcxB0eIzswn9Fx7HauAk6ho1mdiJ\"}"}
{"level":"debug","ts":"2026-07-13T18:06:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"238db7e0-562d-4915-92b6-60c444dde580","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f54db3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"77a9bb6c-68e3-415f-8eb7-fd124dc58ef8","keyName":"e2e-rate-a-c2cd6d","subscription":"e2e-rate-iso-a-c2cd6d","tenant":"e2e-shared-a-f54db3","userId":"77a9bb6c-68e3-415f-8eb7-fd124dc58ef8","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T18:06:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"238db7e0-562d-4915-92b6-60c444dde580","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f54db3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f54db3/rate-test-model-f54db3\",\"requestedSubscription\":\"e2e-rate-iso-a-c2cd6d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T18:06:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"238db7e0-562d-4915-92b6-60c444dde580","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f54db3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f54db3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c2cd6d","namespace":"ai-tenant-e2e-shared-a-f54db3","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T18:06:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"238db7e0-562d-4915-92b6-60c444dde580","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:06:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"238db7e0-562d-4915-92b6-60c444dde580","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:06:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"238db7e0-562d-4915-92b6-60c444dde580","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:06:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"238db7e0-562d-4915-92b6-60c444dde580","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:06:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"238db7e0-562d-4915-92b6-60c444dde580","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f54db3/rate-test-model-f54db3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:06:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"238db7e0-562d-4915-92b6-60c444dde580","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T18:06:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"238db7e0-562d-4915-92b6-60c444dde580","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c2cd6d"}
{"level":"debug","ts":"2026-07-13T18:06:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"238db7e0-562d-4915-92b6-60c444dde580","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T18:06:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"238db7e0-562d-4915-92b6-60c444dde580","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"77a9bb6c-68e3-415f-8eb7-fd124dc58ef8","keyName":"e2e-rate-a-c2cd6d","selected_subscription":"e2e-rate-iso-a-c2cd6d","selected_subscription_key":"ai-tenant-e2e-shared-a-f54db3/e2e-rate-iso-a-c2cd6d@ai-tenant-e2e-shared-a-f54db3/rate-test-model-f54db3","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f54db3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c2cd6d","namespace":"ai-tenant-e2e-shared-a-f54db3","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T18:06:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"238db7e0-562d-4915-92b6-60c444dde580","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:06:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"238db7e0-562d-4915-92b6-60c444dde580","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:06:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"42b9069b-7065-4e9e-8f96-9afe41ba28d4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:59318","PortSpecifier":{"PortValue":59318}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"42b9069b-7065-4e9e-8f96-9afe41ba28d4","method":"POST","path":"/ai-tenant-e2e-shared-a-f54db3/rate-test-model-f54db3/v1/completions","host":"e2e-shared-a-f54db3.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:06:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"42b9069b-7065-4e9e-8f96-9afe41ba28d4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:59318","PortSpecifier":{"PortValue":59318}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783966018,"nanos":83067254},"http":{"id":"42b9069b-7065-4e9e-8f96-9afe41ba28d4","method":"POST","headers":{":authority":"e2e-shared-a-f54db3.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f54db3/rate-test-model-f54db3/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:06:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"42b9069b-7065-4e9e-8f96-9afe41ba28d4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-DjZOwQ8M8oKiLjFc_yB9hdCEdjJVX2HVpcxB0eIzswn9Fx7HauAk6ho1mdiJ"}
{"level":"debug","ts":"2026-07-13T18:06:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"42b9069b-7065-4e9e-8f96-9afe41ba28d4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f54db3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-DjZOwQ8M8oKiLjFc_yB9hdCEdjJVX2HVpcxB0eIzswn9Fx7HauAk6ho1mdiJ\"}"}
{"level":"debug","ts":"2026-07-13T18:06:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"42b9069b-7065-4e9e-8f96-9afe41ba28d4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f54db3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"77a9bb6c-68e3-415f-8eb7-fd124dc58ef8","keyName":"e2e-rate-a-c2cd6d","subscription":"e2e-rate-iso-a-c2cd6d","tenant":"e2e-shared-a-f54db3","userId":"77a9bb6c-68e3-415f-8eb7-fd124dc58ef8","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T18:06:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"42b9069b-7065-4e9e-8f96-9afe41ba28d4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f54db3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f54db3/rate-test-model-f54db3\",\"requestedSubscription\":\"e2e-rate-iso-a-c2cd6d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T18:06:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"42b9069b-7065-4e9e-8f96-9afe41ba28d4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f54db3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f54db3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c2cd6d","namespace":"ai-tenant-e2e-shared-a-f54db3","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T18:06:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"42b9069b-7065-4e9e-8f96-9afe41ba28d4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:06:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42b9069b-7065-4e9e-8f96-9afe41ba28d4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:06:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42b9069b-7065-4e9e-8f96-9afe41ba28d4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:06:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42b9069b-7065-4e9e-8f96-9afe41ba28d4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:06:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42b9069b-7065-4e9e-8f96-9afe41ba28d4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f54db3/rate-test-model-f54db3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:06:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"42b9069b-7065-4e9e-8f96-9afe41ba28d4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T18:06:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"42b9069b-7065-4e9e-8f96-9afe41ba28d4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c2cd6d"}
{"level":"debug","ts":"2026-07-13T18:06:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"42b9069b-7065-4e9e-8f96-9afe41ba28d4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T18:06:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"42b9069b-7065-4e9e-8f96-9afe41ba28d4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"77a9bb6c-68e3-415f-8eb7-fd124dc58ef8","keyName":"e2e-rate-a-c2cd6d","selected_subscription":"e2e-rate-iso-a-c2cd6d","selected_subscription_key":"ai-tenant-e2e-shared-a-f54db3/e2e-rate-iso-a-c2cd6d@ai-tenant-e2e-shared-a-f54db3/rate-test-model-f54db3","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f54db3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c2cd6d","namespace":"ai-tenant-e2e-shared-a-f54db3","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T18:06:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"42b9069b-7065-4e9e-8f96-9afe41ba28d4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:06:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"42b9069b-7065-4e9e-8f96-9afe41ba28d4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:06:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"750a81a1-92a3-4d87-b92e-794f16c89f35","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:59326","PortSpecifier":{"PortValue":59326}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"750a81a1-92a3-4d87-b92e-794f16c89f35","method":"POST","path":"/ai-tenant-e2e-shared-a-f54db3/rate-test-model-f54db3/v1/completions","host":"e2e-shared-a-f54db3.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:06:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"750a81a1-92a3-4d87-b92e-794f16c89f35","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:59326","PortSpecifier":{"PortValue":59326}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783966019,"nanos":120941947},"http":{"id":"750a81a1-92a3-4d87-b92e-794f16c89f35","method":"POST","headers":{":authority":"e2e-shared-a-f54db3.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f54db3/rate-test-model-f54db3/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:06:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"750a81a1-92a3-4d87-b92e-794f16c89f35","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-DjZOwQ8M8oKiLjFc_yB9hdCEdjJVX2HVpcxB0eIzswn9Fx7HauAk6ho1mdiJ"}
{"level":"debug","ts":"2026-07-13T18:06:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"750a81a1-92a3-4d87-b92e-794f16c89f35","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f54db3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-DjZOwQ8M8oKiLjFc_yB9hdCEdjJVX2HVpcxB0eIzswn9Fx7HauAk6ho1mdiJ\"}"}
{"level":"debug","ts":"2026-07-13T18:06:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"750a81a1-92a3-4d87-b92e-794f16c89f35","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f54db3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"77a9bb6c-68e3-415f-8eb7-fd124dc58ef8","keyName":"e2e-rate-a-c2cd6d","subscription":"e2e-rate-iso-a-c2cd6d","tenant":"e2e-shared-a-f54db3","userId":"77a9bb6c-68e3-415f-8eb7-fd124dc58ef8","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T18:06:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"750a81a1-92a3-4d87-b92e-794f16c89f35","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f54db3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f54db3/rate-test-model-f54db3\",\"requestedSubscription\":\"e2e-rate-iso-a-c2cd6d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T18:06:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"750a81a1-92a3-4d87-b92e-794f16c89f35","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f54db3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f54db3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c2cd6d","namespace":"ai-tenant-e2e-shared-a-f54db3","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T18:06:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"750a81a1-92a3-4d87-b92e-794f16c89f35","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:06:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"750a81a1-92a3-4d87-b92e-794f16c89f35","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:06:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"750a81a1-92a3-4d87-b92e-794f16c89f35","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:06:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"750a81a1-92a3-4d87-b92e-794f16c89f35","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f54db3/rate-test-model-f54db3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:06:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"750a81a1-92a3-4d87-b92e-794f16c89f35","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:06:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"750a81a1-92a3-4d87-b92e-794f16c89f35","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T18:06:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"750a81a1-92a3-4d87-b92e-794f16c89f35","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T18:06:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"750a81a1-92a3-4d87-b92e-794f16c89f35","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c2cd6d"}
{"level":"debug","ts":"2026-07-13T18:06:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"750a81a1-92a3-4d87-b92e-794f16c89f35","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"77a9bb6c-68e3-415f-8eb7-fd124dc58ef8","keyName":"e2e-rate-a-c2cd6d","selected_subscription":"e2e-rate-iso-a-c2cd6d","selected_subscription_key":"ai-tenant-e2e-shared-a-f54db3/e2e-rate-iso-a-c2cd6d@ai-tenant-e2e-shared-a-f54db3/rate-test-model-f54db3","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f54db3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c2cd6d","namespace":"ai-tenant-e2e-shared-a-f54db3","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T18:06:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"750a81a1-92a3-4d87-b92e-794f16c89f35","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:06:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"750a81a1-92a3-4d87-b92e-794f16c89f35","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:07:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4f4887a8-7f5f-452b-a0b8-7cda69bd9435","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:41106","PortSpecifier":{"PortValue":41106}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4f4887a8-7f5f-452b-a0b8-7cda69bd9435","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f54db3.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:07:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4f4887a8-7f5f-452b-a0b8-7cda69bd9435","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:41106","PortSpecifier":{"PortValue":41106}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783966032,"nanos":152282060},"http":{"id":"4f4887a8-7f5f-452b-a0b8-7cda69bd9435","method":"POST","headers":{":authority":"e2e-shared-a-f54db3.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:07:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4f4887a8-7f5f-452b-a0b8-7cda69bd9435","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T18:07:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4f4887a8-7f5f-452b-a0b8-7cda69bd9435","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"aed4c252-5d29-4cf0-9404-468616a85f89","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e61dd9bf-ddf3-4b22-a82f-c5020a72ba79"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/132ce6b0ec12"]}}
{"level":"debug","ts":"2026-07-13T18:07:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4f4887a8-7f5f-452b-a0b8-7cda69bd9435","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/132ce6b0ec12"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e61dd9bf-ddf3-4b22-a82f-c5020a72ba79"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"aed4c252-5d29-4cf0-9404-468616a85f89","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4a6339d21620610bfa04639f26a00e7fe569c929a38e1d32497951a4decc2288"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f54db3.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:07:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f4887a8-7f5f-452b-a0b8-7cda69bd9435","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:07:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f4887a8-7f5f-452b-a0b8-7cda69bd9435","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:07:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f4887a8-7f5f-452b-a0b8-7cda69bd9435","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f54db3/rate-test-model-f54db3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:07:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4f4887a8-7f5f-452b-a0b8-7cda69bd9435","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T18:07:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f4887a8-7f5f-452b-a0b8-7cda69bd9435","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T18:07:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f4887a8-7f5f-452b-a0b8-7cda69bd9435","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T18:07:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4f4887a8-7f5f-452b-a0b8-7cda69bd9435","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:07:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4f4887a8-7f5f-452b-a0b8-7cda69bd9435","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:07:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a8b65e14-ab2a-4bb7-93a0-3f7061ffb2e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:46596","PortSpecifier":{"PortValue":46596}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a8b65e14-ab2a-4bb7-93a0-3f7061ffb2e1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b57346.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:07:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a8b65e14-ab2a-4bb7-93a0-3f7061ffb2e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:46596","PortSpecifier":{"PortValue":46596}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783966032,"nanos":195394492},"http":{"id":"a8b65e14-ab2a-4bb7-93a0-3f7061ffb2e1","method":"POST","headers":{":authority":"e2e-shared-b-b57346.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:07:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a8b65e14-ab2a-4bb7-93a0-3f7061ffb2e1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T18:07:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a8b65e14-ab2a-4bb7-93a0-3f7061ffb2e1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"aed4c252-5d29-4cf0-9404-468616a85f89","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e61dd9bf-ddf3-4b22-a82f-c5020a72ba79"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/132ce6b0ec12"]}}
{"level":"debug","ts":"2026-07-13T18:07:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a8b65e14-ab2a-4bb7-93a0-3f7061ffb2e1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/132ce6b0ec12"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e61dd9bf-ddf3-4b22-a82f-c5020a72ba79"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"aed4c252-5d29-4cf0-9404-468616a85f89","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7a2965aef3b7c2070a147b46e8814f5e0947cdbd04f47e55191ef4931e36aa19"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b57346.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:07:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8b65e14-ab2a-4bb7-93a0-3f7061ffb2e1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:07:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8b65e14-ab2a-4bb7-93a0-3f7061ffb2e1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:07:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8b65e14-ab2a-4bb7-93a0-3f7061ffb2e1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b57346/rate-test-model-b57346\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:07:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a8b65e14-ab2a-4bb7-93a0-3f7061ffb2e1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T18:07:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a8b65e14-ab2a-4bb7-93a0-3f7061ffb2e1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T18:07:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a8b65e14-ab2a-4bb7-93a0-3f7061ffb2e1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T18:07:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a8b65e14-ab2a-4bb7-93a0-3f7061ffb2e1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:07:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a8b65e14-ab2a-4bb7-93a0-3f7061ffb2e1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:07:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57236463-1c1e-465c-8781-d11282144a56","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:41122","PortSpecifier":{"PortValue":41122}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"57236463-1c1e-465c-8781-d11282144a56","method":"POST","path":"/ai-tenant-e2e-shared-a-f54db3/rate-test-model-f54db3/v1/completions","host":"e2e-shared-a-f54db3.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:07:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57236463-1c1e-465c-8781-d11282144a56","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:41122","PortSpecifier":{"PortValue":41122}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783966032,"nanos":237502930},"http":{"id":"57236463-1c1e-465c-8781-d11282144a56","method":"POST","headers":{":authority":"e2e-shared-a-f54db3.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f54db3/rate-test-model-f54db3/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:07:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"57236463-1c1e-465c-8781-d11282144a56","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1QobvGCa5vUQ3k4Ez_Nf5DtBIARVlMopp74K1SuaVrmqOPu1Qyeo38Dw5KvbV"}
{"level":"debug","ts":"2026-07-13T18:07:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"57236463-1c1e-465c-8781-d11282144a56","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f54db3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1QobvGCa5vUQ3k4Ez_Nf5DtBIARVlMopp74K1SuaVrmqOPu1Qyeo38Dw5KvbV\"}"}
{"level":"debug","ts":"2026-07-13T18:07:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"57236463-1c1e-465c-8781-d11282144a56","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f54db3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5b485e23-a680-44e0-8f0f-af4a4480f023","keyName":"e2e-rate-a-5ad82a","subscription":"e2e-rate-iso-a-5ad82a","tenant":"e2e-shared-a-f54db3","userId":"5b485e23-a680-44e0-8f0f-af4a4480f023","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T18:07:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"57236463-1c1e-465c-8781-d11282144a56","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f54db3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f54db3/rate-test-model-f54db3\",\"requestedSubscription\":\"e2e-rate-iso-a-5ad82a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T18:07:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"57236463-1c1e-465c-8781-d11282144a56","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f54db3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f54db3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5ad82a","namespace":"ai-tenant-e2e-shared-a-f54db3","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T18:07:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"57236463-1c1e-465c-8781-d11282144a56","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:07:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57236463-1c1e-465c-8781-d11282144a56","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:07:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57236463-1c1e-465c-8781-d11282144a56","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:07:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57236463-1c1e-465c-8781-d11282144a56","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:07:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57236463-1c1e-465c-8781-d11282144a56","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f54db3/rate-test-model-f54db3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:07:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57236463-1c1e-465c-8781-d11282144a56","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T18:07:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57236463-1c1e-465c-8781-d11282144a56","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T18:07:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57236463-1c1e-465c-8781-d11282144a56","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-5ad82a"}
{"level":"debug","ts":"2026-07-13T18:07:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57236463-1c1e-465c-8781-d11282144a56","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5b485e23-a680-44e0-8f0f-af4a4480f023","keyName":"e2e-rate-a-5ad82a","selected_subscription":"e2e-rate-iso-a-5ad82a","selected_subscription_key":"ai-tenant-e2e-shared-a-f54db3/e2e-rate-iso-a-5ad82a@ai-tenant-e2e-shared-a-f54db3/rate-test-model-f54db3","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f54db3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5ad82a","namespace":"ai-tenant-e2e-shared-a-f54db3","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T18:07:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57236463-1c1e-465c-8781-d11282144a56","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:07:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57236463-1c1e-465c-8781-d11282144a56","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:07:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6b8b183e-6e91-44ac-a9b0-44a3e0360f45","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:41126","PortSpecifier":{"PortValue":41126}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6b8b183e-6e91-44ac-a9b0-44a3e0360f45","method":"POST","path":"/ai-tenant-e2e-shared-a-f54db3/rate-test-model-f54db3/v1/completions","host":"e2e-shared-a-f54db3.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:07:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6b8b183e-6e91-44ac-a9b0-44a3e0360f45","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:41126","PortSpecifier":{"PortValue":41126}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783966033,"nanos":273933614},"http":{"id":"6b8b183e-6e91-44ac-a9b0-44a3e0360f45","method":"POST","headers":{":authority":"e2e-shared-a-f54db3.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f54db3/rate-test-model-f54db3/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:07:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6b8b183e-6e91-44ac-a9b0-44a3e0360f45","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1QobvGCa5vUQ3k4Ez_Nf5DtBIARVlMopp74K1SuaVrmqOPu1Qyeo38Dw5KvbV"}
{"level":"debug","ts":"2026-07-13T18:07:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6b8b183e-6e91-44ac-a9b0-44a3e0360f45","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f54db3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1QobvGCa5vUQ3k4Ez_Nf5DtBIARVlMopp74K1SuaVrmqOPu1Qyeo38Dw5KvbV\"}"}
{"level":"debug","ts":"2026-07-13T18:07:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6b8b183e-6e91-44ac-a9b0-44a3e0360f45","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f54db3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5b485e23-a680-44e0-8f0f-af4a4480f023","keyName":"e2e-rate-a-5ad82a","subscription":"e2e-rate-iso-a-5ad82a","tenant":"e2e-shared-a-f54db3","userId":"5b485e23-a680-44e0-8f0f-af4a4480f023","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T18:07:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6b8b183e-6e91-44ac-a9b0-44a3e0360f45","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f54db3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f54db3/rate-test-model-f54db3\",\"requestedSubscription\":\"e2e-rate-iso-a-5ad82a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T18:07:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6b8b183e-6e91-44ac-a9b0-44a3e0360f45","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f54db3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f54db3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5ad82a","namespace":"ai-tenant-e2e-shared-a-f54db3","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T18:07:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6b8b183e-6e91-44ac-a9b0-44a3e0360f45","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:07:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b8b183e-6e91-44ac-a9b0-44a3e0360f45","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:07:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b8b183e-6e91-44ac-a9b0-44a3e0360f45","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:07:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b8b183e-6e91-44ac-a9b0-44a3e0360f45","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f54db3/rate-test-model-f54db3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:07:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b8b183e-6e91-44ac-a9b0-44a3e0360f45","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:07:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b8b183e-6e91-44ac-a9b0-44a3e0360f45","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T18:07:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b8b183e-6e91-44ac-a9b0-44a3e0360f45","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T18:07:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b8b183e-6e91-44ac-a9b0-44a3e0360f45","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-5ad82a"}
{"level":"debug","ts":"2026-07-13T18:07:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b8b183e-6e91-44ac-a9b0-44a3e0360f45","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5b485e23-a680-44e0-8f0f-af4a4480f023","keyName":"e2e-rate-a-5ad82a","selected_subscription":"e2e-rate-iso-a-5ad82a","selected_subscription_key":"ai-tenant-e2e-shared-a-f54db3/e2e-rate-iso-a-5ad82a@ai-tenant-e2e-shared-a-f54db3/rate-test-model-f54db3","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f54db3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5ad82a","namespace":"ai-tenant-e2e-shared-a-f54db3","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T18:07:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6b8b183e-6e91-44ac-a9b0-44a3e0360f45","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:07:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6b8b183e-6e91-44ac-a9b0-44a3e0360f45","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:07:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"218a258f-587a-4237-a671-268df7f74073","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:41132","PortSpecifier":{"PortValue":41132}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"218a258f-587a-4237-a671-268df7f74073","method":"POST","path":"/ai-tenant-e2e-shared-a-f54db3/rate-test-model-f54db3/v1/completions","host":"e2e-shared-a-f54db3.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:07:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"218a258f-587a-4237-a671-268df7f74073","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:41132","PortSpecifier":{"PortValue":41132}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783966034,"nanos":333826981},"http":{"id":"218a258f-587a-4237-a671-268df7f74073","method":"POST","headers":{":authority":"e2e-shared-a-f54db3.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f54db3/rate-test-model-f54db3/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:07:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"218a258f-587a-4237-a671-268df7f74073","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1QobvGCa5vUQ3k4Ez_Nf5DtBIARVlMopp74K1SuaVrmqOPu1Qyeo38Dw5KvbV"}
{"level":"debug","ts":"2026-07-13T18:07:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"218a258f-587a-4237-a671-268df7f74073","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f54db3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1QobvGCa5vUQ3k4Ez_Nf5DtBIARVlMopp74K1SuaVrmqOPu1Qyeo38Dw5KvbV\"}"}
{"level":"debug","ts":"2026-07-13T18:07:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"218a258f-587a-4237-a671-268df7f74073","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f54db3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5b485e23-a680-44e0-8f0f-af4a4480f023","keyName":"e2e-rate-a-5ad82a","subscription":"e2e-rate-iso-a-5ad82a","tenant":"e2e-shared-a-f54db3","userId":"5b485e23-a680-44e0-8f0f-af4a4480f023","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T18:07:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"218a258f-587a-4237-a671-268df7f74073","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f54db3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f54db3/rate-test-model-f54db3\",\"requestedSubscription\":\"e2e-rate-iso-a-5ad82a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T18:07:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"218a258f-587a-4237-a671-268df7f74073","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f54db3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f54db3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5ad82a","namespace":"ai-tenant-e2e-shared-a-f54db3","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T18:07:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"218a258f-587a-4237-a671-268df7f74073","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:07:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"218a258f-587a-4237-a671-268df7f74073","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:07:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"218a258f-587a-4237-a671-268df7f74073","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:07:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"218a258f-587a-4237-a671-268df7f74073","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:07:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"218a258f-587a-4237-a671-268df7f74073","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f54db3/rate-test-model-f54db3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:07:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"218a258f-587a-4237-a671-268df7f74073","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-5ad82a"}
{"level":"debug","ts":"2026-07-13T18:07:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"218a258f-587a-4237-a671-268df7f74073","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T18:07:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"218a258f-587a-4237-a671-268df7f74073","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T18:07:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"218a258f-587a-4237-a671-268df7f74073","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5b485e23-a680-44e0-8f0f-af4a4480f023","keyName":"e2e-rate-a-5ad82a","selected_subscription":"e2e-rate-iso-a-5ad82a","selected_subscription_key":"ai-tenant-e2e-shared-a-f54db3/e2e-rate-iso-a-5ad82a@ai-tenant-e2e-shared-a-f54db3/rate-test-model-f54db3","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f54db3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5ad82a","namespace":"ai-tenant-e2e-shared-a-f54db3","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T18:07:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"218a258f-587a-4237-a671-268df7f74073","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:07:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"218a258f-587a-4237-a671-268df7f74073","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:07:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"978c0e93-652f-4b8a-9e74-5e29645f6090","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:46602","PortSpecifier":{"PortValue":46602}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"978c0e93-652f-4b8a-9e74-5e29645f6090","method":"POST","path":"/ai-tenant-e2e-shared-b-b57346/rate-test-model-b57346/v1/completions","host":"e2e-shared-b-b57346.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T18:07:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"978c0e93-652f-4b8a-9e74-5e29645f6090","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:46602","PortSpecifier":{"PortValue":46602}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783966034,"nanos":370875008},"http":{"id":"978c0e93-652f-4b8a-9e74-5e29645f6090","method":"POST","headers":{":authority":"e2e-shared-b-b57346.apps.2719275a-11bf-4563-a6e1-132ce6b0ec12.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-b57346/rate-test-model-b57346/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:07:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"978c0e93-652f-4b8a-9e74-5e29645f6090","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-tFnfr0pbACjhqkqK_GyUR2uOGj5K6mpOteLjwHzwjI6Ywraeqbi7FuNhIC7v"}
{"level":"debug","ts":"2026-07-13T18:07:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"978c0e93-652f-4b8a-9e74-5e29645f6090","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-b57346.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-tFnfr0pbACjhqkqK_GyUR2uOGj5K6mpOteLjwHzwjI6Ywraeqbi7FuNhIC7v\"}"}
{"level":"debug","ts":"2026-07-13T18:07:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"978c0e93-652f-4b8a-9e74-5e29645f6090","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b57346.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4655b4c7-36d0-4579-abcb-46b4aa49c151","keyName":"e2e-rate-b-5ad82a","subscription":"e2e-rate-iso-b-5ad82a","tenant":"e2e-shared-b-b57346","userId":"4655b4c7-36d0-4579-abcb-46b4aa49c151","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T18:07:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"978c0e93-652f-4b8a-9e74-5e29645f6090","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-b57346.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-b57346/rate-test-model-b57346\",\"requestedSubscription\":\"e2e-rate-iso-b-5ad82a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T18:07:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"978c0e93-652f-4b8a-9e74-5e29645f6090","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b57346.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b57346","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-5ad82a","namespace":"ai-tenant-e2e-shared-b-b57346","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T18:07:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"978c0e93-652f-4b8a-9e74-5e29645f6090","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T18:07:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"978c0e93-652f-4b8a-9e74-5e29645f6090","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:07:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"978c0e93-652f-4b8a-9e74-5e29645f6090","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:07:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"978c0e93-652f-4b8a-9e74-5e29645f6090","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:07:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"978c0e93-652f-4b8a-9e74-5e29645f6090","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b57346/rate-test-model-b57346\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T18:07:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"978c0e93-652f-4b8a-9e74-5e29645f6090","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-5ad82a"}
{"level":"debug","ts":"2026-07-13T18:07:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"978c0e93-652f-4b8a-9e74-5e29645f6090","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T18:07:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"978c0e93-652f-4b8a-9e74-5e29645f6090","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T18:07:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"978c0e93-652f-4b8a-9e74-5e29645f6090","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4655b4c7-36d0-4579-abcb-46b4aa49c151","keyName":"e2e-rate-b-5ad82a","selected_subscription":"e2e-rate-iso-b-5ad82a","selected_subscription_key":"ai-tenant-e2e-shared-b-b57346/e2e-rate-iso-b-5ad82a@ai-tenant-e2e-shared-b-b57346/rate-test-model-b57346","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b57346","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-5ad82a","namespace":"ai-tenant-e2e-shared-b-b57346","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T18:07:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"978c0e93-652f-4b8a-9e74-5e29645f6090","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T18:07:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"978c0e93-652f-4b8a-9e74-5e29645f6090","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T18:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/56bc7f18fbd299570490a28ca7d67689e9a42881e807e784cdd1f35dc9980b5d"}
{"level":"info","ts":"2026-07-13T18:07:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b869053897499a026debd6c1764c13283384aa2674731bf53db68acde5cbf3de"}
{"level":"info","ts":"2026-07-13T18:07:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1975fff45f9590bb64062446ce09dc4fa99dc910654539b55a92d9567cb6fbff"}
{"level":"info","ts":"2026-07-13T18:07:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/54964b17152bd5ec1a26610bc7134937d66b64d8388ecf015b61a8ca03a108dc"}
{"level":"info","ts":"2026-07-13T18:07:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c216124eadcff54789a0fb23354d358b2acf6b056141f11b6aaf631464e773a1"}
{"level":"info","ts":"2026-07-13T18:07:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0640d9f9b53261ea8412284ca220c63b3d35f96ff6415563ac6a3b214b86466a"}
{"level":"info","ts":"2026-07-13T18:07:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7e7509bdba93dda4e30b66a21a903e87460b80c6bb992a14283b398e422db557"}
{"level":"info","ts":"2026-07-13T18:07:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ff74793958bf7dadc1384220d814d0689e662212cb9de4be289cf8b4ca204615"}
{"level":"info","ts":"2026-07-13T18:07:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/103e1e43d493a572eb27ef2ad721209fb5c19ba4a18dcb3a6ab9a78624b2d187"}
{"level":"info","ts":"2026-07-13T18:07:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/228b4b0420a96ede28cc71276d7cd77f4f38daea639318eac2c2b02c540c5cb6"}
{"level":"info","ts":"2026-07-13T18:07:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2f6b5fef33d461101a78af85b060592dfe6abf4574120e7a7d160e02934f5f5d"}
{"level":"info","ts":"2026-07-13T18:07:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5102d027e4413955d8f966ee60ff9ba408e4b0aef80a80e5859ba226d350cea3"}
{"level":"info","ts":"2026-07-13T18:07:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7d43e02d292623a20811ba937e552e2406d1cc6df748cf70e184b374eac6eb12"}
{"level":"info","ts":"2026-07-13T18:07:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d07bb02649cc1a82fad657a759e85d29981c866f0914389b750a419e48c73514"}
{"level":"info","ts":"2026-07-13T18:07:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/89fdf929eff6a6b1c1569cc7263c619a41b978276451b7001ae8e7bd2ffa1003"}
{"level":"info","ts":"2026-07-13T18:07:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/63040648c73da05750a5d771c1435d0833c4c457a830ac46915ffb93eda39108"}
{"level":"info","ts":"2026-07-13T18:07:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/db7f11d7eddbb541b33ea26c7e3bad0bf758275f3bbbf245bef49d18cf35d511"}
{"level":"info","ts":"2026-07-13T18:07:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/208855e9b86067955f9a6fef2aba575418879330c21dd43a4eb33793fa0fde47"}
{"level":"info","ts":"2026-07-13T18:07:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/34f2a54846c06f19022727f634be5c948928a1e098a29d4e9e81087e78cad116"}
{"level":"info","ts":"2026-07-13T18:07:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a6339d21620610bfa04639f26a00e7fe569c929a38e1d32497951a4decc2288"}
{"level":"info","ts":"2026-07-13T18:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7a2965aef3b7c2070a147b46e8814f5e0947cdbd04f47e55191ef4931e36aa19"}
{"level":"info","ts":"2026-07-13T18:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eb468b6eeda307f4cf04d62ddc3e92bffac6d092642e1f1fc8601045c17fd6de"}
{"level":"info","ts":"2026-07-13T18:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/79d49edac2db1014f3090d51a543777010688b14851a37bf084ddd5299b75413"}
{"level":"info","ts":"2026-07-13T18:08:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cc928132af03242d4c18c6705952c307130e43eb5c364a2658b52a4e5fce94a7"}