--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"info","ts":"2026-07-12T16:57:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0247a468d0cd9c2ba1479e7800c09ee378c71c32ea391fb6518982db9e7395d1"}
{"level":"debug","ts":"2026-07-12T16:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4200f6293adafc06ff5dbae9f907e017cbe49361d04079782a8fb2a2876068d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:57:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:57:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4200f6293adafc06ff5dbae9f907e017cbe49361d04079782a8fb2a2876068d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4200f6293adafc06ff5dbae9f907e017cbe49361d04079782a8fb2a2876068d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:57:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:57:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4200f6293adafc06ff5dbae9f907e017cbe49361d04079782a8fb2a2876068d0"}
{"level":"info","ts":"2026-07-12T16:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4200f6293adafc06ff5dbae9f907e017cbe49361d04079782a8fb2a2876068d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4200f6293adafc06ff5dbae9f907e017cbe49361d04079782a8fb2a2876068d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:57:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:57:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-12T16:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4200f6293adafc06ff5dbae9f907e017cbe49361d04079782a8fb2a2876068d0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4200f6293adafc06ff5dbae9f907e017cbe49361d04079782a8fb2a2876068d0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-12T16:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4200f6293adafc06ff5dbae9f907e017cbe49361d04079782a8fb2a2876068d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4200f6293adafc06ff5dbae9f907e017cbe49361d04079782a8fb2a2876068d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T16:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4200f6293adafc06ff5dbae9f907e017cbe49361d04079782a8fb2a2876068d0"}
{"level":"info","ts":"2026-07-12T16:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4200f6293adafc06ff5dbae9f907e017cbe49361d04079782a8fb2a2876068d0"}
{"level":"debug","ts":"2026-07-12T16:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e25cb71e670b490abb68346bcf663ab4eacdf75e4f124a6e4333e8dbc3457a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:57:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:57:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e25cb71e670b490abb68346bcf663ab4eacdf75e4f124a6e4333e8dbc3457a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e25cb71e670b490abb68346bcf663ab4eacdf75e4f124a6e4333e8dbc3457a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e25cb71e670b490abb68346bcf663ab4eacdf75e4f124a6e4333e8dbc3457a2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T16:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e25cb71e670b490abb68346bcf663ab4eacdf75e4f124a6e4333e8dbc3457a2"}
{"level":"debug","ts":"2026-07-12T16:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4200f6293adafc06ff5dbae9f907e017cbe49361d04079782a8fb2a2876068d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T16:57:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T16:57:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4200f6293adafc06ff5dbae9f907e017cbe49361d04079782a8fb2a2876068d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4200f6293adafc06ff5dbae9f907e017cbe49361d04079782a8fb2a2876068d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e25cb71e670b490abb68346bcf663ab4eacdf75e4f124a6e4333e8dbc3457a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4200f6293adafc06ff5dbae9f907e017cbe49361d04079782a8fb2a2876068d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T16:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e25cb71e670b490abb68346bcf663ab4eacdf75e4f124a6e4333e8dbc3457a2"}
{"level":"info","ts":"2026-07-12T16:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4200f6293adafc06ff5dbae9f907e017cbe49361d04079782a8fb2a2876068d0"}
{"level":"debug","ts":"2026-07-12T16:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e25cb71e670b490abb68346bcf663ab4eacdf75e4f124a6e4333e8dbc3457a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T16:57:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T16:57:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e25cb71e670b490abb68346bcf663ab4eacdf75e4f124a6e4333e8dbc3457a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e25cb71e670b490abb68346bcf663ab4eacdf75e4f124a6e4333e8dbc3457a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"856bf89d0753f2d3ff3bb1c56e08660bdb1e6c75987c8f46a163c4c911e954ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:57:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:57:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"856bf89d0753f2d3ff3bb1c56e08660bdb1e6c75987c8f46a163c4c911e954ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e25cb71e670b490abb68346bcf663ab4eacdf75e4f124a6e4333e8dbc3457a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f51e130b2f8d26af4fb74a3b198462b34e05fefa556f5cb149fd94d7e719cea0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:57:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:57:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/856bf89d0753f2d3ff3bb1c56e08660bdb1e6c75987c8f46a163c4c911e954ce"}
{"level":"info","ts":"2026-07-12T16:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f51e130b2f8d26af4fb74a3b198462b34e05fefa556f5cb149fd94d7e719cea0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"856bf89d0753f2d3ff3bb1c56e08660bdb1e6c75987c8f46a163c4c911e954ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T16:57:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T16:57:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["856bf89d0753f2d3ff3bb1c56e08660bdb1e6c75987c8f46a163c4c911e954ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"856bf89d0753f2d3ff3bb1c56e08660bdb1e6c75987c8f46a163c4c911e954ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f51e130b2f8d26af4fb74a3b198462b34e05fefa556f5cb149fd94d7e719cea0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"856bf89d0753f2d3ff3bb1c56e08660bdb1e6c75987c8f46a163c4c911e954ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T16:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e25cb71e670b490abb68346bcf663ab4eacdf75e4f124a6e4333e8dbc3457a2"}
{"level":"debug","ts":"2026-07-12T16:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f51e130b2f8d26af4fb74a3b198462b34e05fefa556f5cb149fd94d7e719cea0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:57:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:57:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f51e130b2f8d26af4fb74a3b198462b34e05fefa556f5cb149fd94d7e719cea0"}
{"level":"info","ts":"2026-07-12T16:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f51e130b2f8d26af4fb74a3b198462b34e05fefa556f5cb149fd94d7e719cea0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f51e130b2f8d26af4fb74a3b198462b34e05fefa556f5cb149fd94d7e719cea0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T16:57:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T16:57:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f51e130b2f8d26af4fb74a3b198462b34e05fefa556f5cb149fd94d7e719cea0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f51e130b2f8d26af4fb74a3b198462b34e05fefa556f5cb149fd94d7e719cea0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f51e130b2f8d26af4fb74a3b198462b34e05fefa556f5cb149fd94d7e719cea0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T16:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/856bf89d0753f2d3ff3bb1c56e08660bdb1e6c75987c8f46a163c4c911e954ce"}
{"level":"debug","ts":"2026-07-12T16:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f51e130b2f8d26af4fb74a3b198462b34e05fefa556f5cb149fd94d7e719cea0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:57:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:57:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f51e130b2f8d26af4fb74a3b198462b34e05fefa556f5cb149fd94d7e719cea0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f51e130b2f8d26af4fb74a3b198462b34e05fefa556f5cb149fd94d7e719cea0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f51e130b2f8d26af4fb74a3b198462b34e05fefa556f5cb149fd94d7e719cea0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T16:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f51e130b2f8d26af4fb74a3b198462b34e05fefa556f5cb149fd94d7e719cea0"}
{"level":"debug","ts":"2026-07-12T16:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f51e130b2f8d26af4fb74a3b198462b34e05fefa556f5cb149fd94d7e719cea0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T16:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f51e130b2f8d26af4fb74a3b198462b34e05fefa556f5cb149fd94d7e719cea0"}
{"level":"debug","ts":"2026-07-12T16:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f51e130b2f8d26af4fb74a3b198462b34e05fefa556f5cb149fd94d7e719cea0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T16:57:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T16:57:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f51e130b2f8d26af4fb74a3b198462b34e05fefa556f5cb149fd94d7e719cea0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f51e130b2f8d26af4fb74a3b198462b34e05fefa556f5cb149fd94d7e719cea0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f51e130b2f8d26af4fb74a3b198462b34e05fefa556f5cb149fd94d7e719cea0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:57:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:57:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f51e130b2f8d26af4fb74a3b198462b34e05fefa556f5cb149fd94d7e719cea0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f51e130b2f8d26af4fb74a3b198462b34e05fefa556f5cb149fd94d7e719cea0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T16:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f51e130b2f8d26af4fb74a3b198462b34e05fefa556f5cb149fd94d7e719cea0"}
{"level":"debug","ts":"2026-07-12T16:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f51e130b2f8d26af4fb74a3b198462b34e05fefa556f5cb149fd94d7e719cea0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f51e130b2f8d26af4fb74a3b198462b34e05fefa556f5cb149fd94d7e719cea0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T16:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f51e130b2f8d26af4fb74a3b198462b34e05fefa556f5cb149fd94d7e719cea0"}
{"level":"debug","ts":"2026-07-12T16:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f51e130b2f8d26af4fb74a3b198462b34e05fefa556f5cb149fd94d7e719cea0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T16:57:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T16:57:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f51e130b2f8d26af4fb74a3b198462b34e05fefa556f5cb149fd94d7e719cea0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f51e130b2f8d26af4fb74a3b198462b34e05fefa556f5cb149fd94d7e719cea0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f51e130b2f8d26af4fb74a3b198462b34e05fefa556f5cb149fd94d7e719cea0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:57:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:57:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f51e130b2f8d26af4fb74a3b198462b34e05fefa556f5cb149fd94d7e719cea0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f51e130b2f8d26af4fb74a3b198462b34e05fefa556f5cb149fd94d7e719cea0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f51e130b2f8d26af4fb74a3b198462b34e05fefa556f5cb149fd94d7e719cea0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T16:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f51e130b2f8d26af4fb74a3b198462b34e05fefa556f5cb149fd94d7e719cea0"}
{"level":"debug","ts":"2026-07-12T16:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f51e130b2f8d26af4fb74a3b198462b34e05fefa556f5cb149fd94d7e719cea0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T16:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f51e130b2f8d26af4fb74a3b198462b34e05fefa556f5cb149fd94d7e719cea0"}
{"level":"debug","ts":"2026-07-12T16:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f51e130b2f8d26af4fb74a3b198462b34e05fefa556f5cb149fd94d7e719cea0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T16:57:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T16:57:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f51e130b2f8d26af4fb74a3b198462b34e05fefa556f5cb149fd94d7e719cea0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f51e130b2f8d26af4fb74a3b198462b34e05fefa556f5cb149fd94d7e719cea0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f51e130b2f8d26af4fb74a3b198462b34e05fefa556f5cb149fd94d7e719cea0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:57:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:57:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f51e130b2f8d26af4fb74a3b198462b34e05fefa556f5cb149fd94d7e719cea0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f51e130b2f8d26af4fb74a3b198462b34e05fefa556f5cb149fd94d7e719cea0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f51e130b2f8d26af4fb74a3b198462b34e05fefa556f5cb149fd94d7e719cea0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T16:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f51e130b2f8d26af4fb74a3b198462b34e05fefa556f5cb149fd94d7e719cea0"}
{"level":"debug","ts":"2026-07-12T16:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f51e130b2f8d26af4fb74a3b198462b34e05fefa556f5cb149fd94d7e719cea0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T16:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f51e130b2f8d26af4fb74a3b198462b34e05fefa556f5cb149fd94d7e719cea0"}
{"level":"debug","ts":"2026-07-12T16:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f51e130b2f8d26af4fb74a3b198462b34e05fefa556f5cb149fd94d7e719cea0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T16:57:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T16:57:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f51e130b2f8d26af4fb74a3b198462b34e05fefa556f5cb149fd94d7e719cea0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f51e130b2f8d26af4fb74a3b198462b34e05fefa556f5cb149fd94d7e719cea0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f51e130b2f8d26af4fb74a3b198462b34e05fefa556f5cb149fd94d7e719cea0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:57:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:57:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f51e130b2f8d26af4fb74a3b198462b34e05fefa556f5cb149fd94d7e719cea0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f51e130b2f8d26af4fb74a3b198462b34e05fefa556f5cb149fd94d7e719cea0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f51e130b2f8d26af4fb74a3b198462b34e05fefa556f5cb149fd94d7e719cea0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T16:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f51e130b2f8d26af4fb74a3b198462b34e05fefa556f5cb149fd94d7e719cea0"}
{"level":"debug","ts":"2026-07-12T16:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f51e130b2f8d26af4fb74a3b198462b34e05fefa556f5cb149fd94d7e719cea0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T16:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f51e130b2f8d26af4fb74a3b198462b34e05fefa556f5cb149fd94d7e719cea0"}
{"level":"debug","ts":"2026-07-12T16:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f51e130b2f8d26af4fb74a3b198462b34e05fefa556f5cb149fd94d7e719cea0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T16:57:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T16:57:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f51e130b2f8d26af4fb74a3b198462b34e05fefa556f5cb149fd94d7e719cea0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f51e130b2f8d26af4fb74a3b198462b34e05fefa556f5cb149fd94d7e719cea0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f51e130b2f8d26af4fb74a3b198462b34e05fefa556f5cb149fd94d7e719cea0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:57:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:57:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f51e130b2f8d26af4fb74a3b198462b34e05fefa556f5cb149fd94d7e719cea0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f51e130b2f8d26af4fb74a3b198462b34e05fefa556f5cb149fd94d7e719cea0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f51e130b2f8d26af4fb74a3b198462b34e05fefa556f5cb149fd94d7e719cea0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T16:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f51e130b2f8d26af4fb74a3b198462b34e05fefa556f5cb149fd94d7e719cea0"}
{"level":"debug","ts":"2026-07-12T16:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f51e130b2f8d26af4fb74a3b198462b34e05fefa556f5cb149fd94d7e719cea0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T16:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f51e130b2f8d26af4fb74a3b198462b34e05fefa556f5cb149fd94d7e719cea0"}
{"level":"debug","ts":"2026-07-12T16:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f51e130b2f8d26af4fb74a3b198462b34e05fefa556f5cb149fd94d7e719cea0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T16:57:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T16:57:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f51e130b2f8d26af4fb74a3b198462b34e05fefa556f5cb149fd94d7e719cea0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f51e130b2f8d26af4fb74a3b198462b34e05fefa556f5cb149fd94d7e719cea0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f51e130b2f8d26af4fb74a3b198462b34e05fefa556f5cb149fd94d7e719cea0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T16:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f51e130b2f8d26af4fb74a3b198462b34e05fefa556f5cb149fd94d7e719cea0"}
{"level":"debug","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1cd785cb2c4f1b1f4ec355655e563f17ddd5cd18ac91f98087df54084c9f916","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:57:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:57:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1cd785cb2c4f1b1f4ec355655e563f17ddd5cd18ac91f98087df54084c9f916","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1cd785cb2c4f1b1f4ec355655e563f17ddd5cd18ac91f98087df54084c9f916","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1cd785cb2c4f1b1f4ec355655e563f17ddd5cd18ac91f98087df54084c9f916","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1cd785cb2c4f1b1f4ec355655e563f17ddd5cd18ac91f98087df54084c9f916"}
{"level":"debug","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1cd785cb2c4f1b1f4ec355655e563f17ddd5cd18ac91f98087df54084c9f916","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1cd785cb2c4f1b1f4ec355655e563f17ddd5cd18ac91f98087df54084c9f916"}
{"level":"debug","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1cd785cb2c4f1b1f4ec355655e563f17ddd5cd18ac91f98087df54084c9f916","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T16:57:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T16:57:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1cd785cb2c4f1b1f4ec355655e563f17ddd5cd18ac91f98087df54084c9f916"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1cd785cb2c4f1b1f4ec355655e563f17ddd5cd18ac91f98087df54084c9f916","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1cd785cb2c4f1b1f4ec355655e563f17ddd5cd18ac91f98087df54084c9f916","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1cd785cb2c4f1b1f4ec355655e563f17ddd5cd18ac91f98087df54084c9f916"}
{"level":"debug","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c206603f2017af2a8cbaaf59322aa135ae4f69583a726a5fc9c251d336435e06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:57:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:57:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c206603f2017af2a8cbaaf59322aa135ae4f69583a726a5fc9c251d336435e06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c206603f2017af2a8cbaaf59322aa135ae4f69583a726a5fc9c251d336435e06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c206603f2017af2a8cbaaf59322aa135ae4f69583a726a5fc9c251d336435e06","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c206603f2017af2a8cbaaf59322aa135ae4f69583a726a5fc9c251d336435e06"}
{"level":"debug","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c206603f2017af2a8cbaaf59322aa135ae4f69583a726a5fc9c251d336435e06","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c206603f2017af2a8cbaaf59322aa135ae4f69583a726a5fc9c251d336435e06"}
{"level":"debug","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c206603f2017af2a8cbaaf59322aa135ae4f69583a726a5fc9c251d336435e06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T16:57:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T16:57:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c206603f2017af2a8cbaaf59322aa135ae4f69583a726a5fc9c251d336435e06"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c206603f2017af2a8cbaaf59322aa135ae4f69583a726a5fc9c251d336435e06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c206603f2017af2a8cbaaf59322aa135ae4f69583a726a5fc9c251d336435e06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:57:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:57:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c206603f2017af2a8cbaaf59322aa135ae4f69583a726a5fc9c251d336435e06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c206603f2017af2a8cbaaf59322aa135ae4f69583a726a5fc9c251d336435e06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c206603f2017af2a8cbaaf59322aa135ae4f69583a726a5fc9c251d336435e06","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c206603f2017af2a8cbaaf59322aa135ae4f69583a726a5fc9c251d336435e06"}
{"level":"debug","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c206603f2017af2a8cbaaf59322aa135ae4f69583a726a5fc9c251d336435e06","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c206603f2017af2a8cbaaf59322aa135ae4f69583a726a5fc9c251d336435e06"}
{"level":"debug","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c206603f2017af2a8cbaaf59322aa135ae4f69583a726a5fc9c251d336435e06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T16:57:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T16:57:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c206603f2017af2a8cbaaf59322aa135ae4f69583a726a5fc9c251d336435e06"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c206603f2017af2a8cbaaf59322aa135ae4f69583a726a5fc9c251d336435e06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c206603f2017af2a8cbaaf59322aa135ae4f69583a726a5fc9c251d336435e06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:57:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:57:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c206603f2017af2a8cbaaf59322aa135ae4f69583a726a5fc9c251d336435e06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c206603f2017af2a8cbaaf59322aa135ae4f69583a726a5fc9c251d336435e06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c912ba81d9b11d4c04e440725aec5ca0b3ef174699ea189de463072d99a0f050","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:57:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:57:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c206603f2017af2a8cbaaf59322aa135ae4f69583a726a5fc9c251d336435e06"}
{"level":"info","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c912ba81d9b11d4c04e440725aec5ca0b3ef174699ea189de463072d99a0f050","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c206603f2017af2a8cbaaf59322aa135ae4f69583a726a5fc9c251d336435e06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T16:57:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T16:57:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c206603f2017af2a8cbaaf59322aa135ae4f69583a726a5fc9c251d336435e06"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c912ba81d9b11d4c04e440725aec5ca0b3ef174699ea189de463072d99a0f050"}
{"level":"info","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c206603f2017af2a8cbaaf59322aa135ae4f69583a726a5fc9c251d336435e06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c912ba81d9b11d4c04e440725aec5ca0b3ef174699ea189de463072d99a0f050","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T16:57:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T16:57:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c912ba81d9b11d4c04e440725aec5ca0b3ef174699ea189de463072d99a0f050"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c912ba81d9b11d4c04e440725aec5ca0b3ef174699ea189de463072d99a0f050","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c206603f2017af2a8cbaaf59322aa135ae4f69583a726a5fc9c251d336435e06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:57:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:57:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c206603f2017af2a8cbaaf59322aa135ae4f69583a726a5fc9c251d336435e06"}
{"level":"info","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c206603f2017af2a8cbaaf59322aa135ae4f69583a726a5fc9c251d336435e06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c912ba81d9b11d4c04e440725aec5ca0b3ef174699ea189de463072d99a0f050","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:57:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:57:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c912ba81d9b11d4c04e440725aec5ca0b3ef174699ea189de463072d99a0f050","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c206603f2017af2a8cbaaf59322aa135ae4f69583a726a5fc9c251d336435e06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T16:57:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T16:57:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c206603f2017af2a8cbaaf59322aa135ae4f69583a726a5fc9c251d336435e06"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c912ba81d9b11d4c04e440725aec5ca0b3ef174699ea189de463072d99a0f050"}
{"level":"info","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c206603f2017af2a8cbaaf59322aa135ae4f69583a726a5fc9c251d336435e06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c912ba81d9b11d4c04e440725aec5ca0b3ef174699ea189de463072d99a0f050","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T16:57:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T16:57:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c912ba81d9b11d4c04e440725aec5ca0b3ef174699ea189de463072d99a0f050"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c912ba81d9b11d4c04e440725aec5ca0b3ef174699ea189de463072d99a0f050","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c206603f2017af2a8cbaaf59322aa135ae4f69583a726a5fc9c251d336435e06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:57:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:57:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c206603f2017af2a8cbaaf59322aa135ae4f69583a726a5fc9c251d336435e06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c912ba81d9b11d4c04e440725aec5ca0b3ef174699ea189de463072d99a0f050","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c206603f2017af2a8cbaaf59322aa135ae4f69583a726a5fc9c251d336435e06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c206603f2017af2a8cbaaf59322aa135ae4f69583a726a5fc9c251d336435e06","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c206603f2017af2a8cbaaf59322aa135ae4f69583a726a5fc9c251d336435e06"}
{"level":"debug","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c206603f2017af2a8cbaaf59322aa135ae4f69583a726a5fc9c251d336435e06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T16:57:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T16:57:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c206603f2017af2a8cbaaf59322aa135ae4f69583a726a5fc9c251d336435e06"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c912ba81d9b11d4c04e440725aec5ca0b3ef174699ea189de463072d99a0f050"}
{"level":"info","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c206603f2017af2a8cbaaf59322aa135ae4f69583a726a5fc9c251d336435e06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c206603f2017af2a8cbaaf59322aa135ae4f69583a726a5fc9c251d336435e06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:57:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:57:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c206603f2017af2a8cbaaf59322aa135ae4f69583a726a5fc9c251d336435e06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c206603f2017af2a8cbaaf59322aa135ae4f69583a726a5fc9c251d336435e06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c206603f2017af2a8cbaaf59322aa135ae4f69583a726a5fc9c251d336435e06","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c206603f2017af2a8cbaaf59322aa135ae4f69583a726a5fc9c251d336435e06"}
{"level":"debug","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9b1e98fc4dcee2e67a6c728c4b4d78c82d420aca7249f30eae1865b02592a58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:57:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:57:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c206603f2017af2a8cbaaf59322aa135ae4f69583a726a5fc9c251d336435e06"}
{"level":"info","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9b1e98fc4dcee2e67a6c728c4b4d78c82d420aca7249f30eae1865b02592a58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c206603f2017af2a8cbaaf59322aa135ae4f69583a726a5fc9c251d336435e06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T16:57:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T16:57:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c206603f2017af2a8cbaaf59322aa135ae4f69583a726a5fc9c251d336435e06"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c206603f2017af2a8cbaaf59322aa135ae4f69583a726a5fc9c251d336435e06","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9b1e98fc4dcee2e67a6c728c4b4d78c82d420aca7249f30eae1865b02592a58"}
{"level":"debug","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9b1e98fc4dcee2e67a6c728c4b4d78c82d420aca7249f30eae1865b02592a58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T16:57:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T16:57:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9b1e98fc4dcee2e67a6c728c4b4d78c82d420aca7249f30eae1865b02592a58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9b1e98fc4dcee2e67a6c728c4b4d78c82d420aca7249f30eae1865b02592a58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c206603f2017af2a8cbaaf59322aa135ae4f69583a726a5fc9c251d336435e06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9b1e98fc4dcee2e67a6c728c4b4d78c82d420aca7249f30eae1865b02592a58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:57:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:57:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9b1e98fc4dcee2e67a6c728c4b4d78c82d420aca7249f30eae1865b02592a58"}
{"level":"info","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9b1e98fc4dcee2e67a6c728c4b4d78c82d420aca7249f30eae1865b02592a58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9b1e98fc4dcee2e67a6c728c4b4d78c82d420aca7249f30eae1865b02592a58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T16:57:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T16:57:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9b1e98fc4dcee2e67a6c728c4b4d78c82d420aca7249f30eae1865b02592a58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9b1e98fc4dcee2e67a6c728c4b4d78c82d420aca7249f30eae1865b02592a58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9b1e98fc4dcee2e67a6c728c4b4d78c82d420aca7249f30eae1865b02592a58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T16:57:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T16:57:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9b1e98fc4dcee2e67a6c728c4b4d78c82d420aca7249f30eae1865b02592a58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c206603f2017af2a8cbaaf59322aa135ae4f69583a726a5fc9c251d336435e06"}
{"level":"error","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a9b1e98fc4dcee2e67a6c728c4b4d78c82d420aca7249f30eae1865b02592a58","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a9b1e98fc4dcee2e67a6c728c4b4d78c82d420aca7249f30eae1865b02592a58\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-12T16:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9b1e98fc4dcee2e67a6c728c4b4d78c82d420aca7249f30eae1865b02592a58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:57:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:57:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:57:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9b1e98fc4dcee2e67a6c728c4b4d78c82d420aca7249f30eae1865b02592a58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:57:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9b1e98fc4dcee2e67a6c728c4b4d78c82d420aca7249f30eae1865b02592a58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:57:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:57:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:57:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9b1e98fc4dcee2e67a6c728c4b4d78c82d420aca7249f30eae1865b02592a58"}
{"level":"error","ts":"2026-07-12T16:57:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a9b1e98fc4dcee2e67a6c728c4b4d78c82d420aca7249f30eae1865b02592a58","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a9b1e98fc4dcee2e67a6c728c4b4d78c82d420aca7249f30eae1865b02592a58\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-12T16:57:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9b1e98fc4dcee2e67a6c728c4b4d78c82d420aca7249f30eae1865b02592a58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:57:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9b1e98fc4dcee2e67a6c728c4b4d78c82d420aca7249f30eae1865b02592a58","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T16:57:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9b1e98fc4dcee2e67a6c728c4b4d78c82d420aca7249f30eae1865b02592a58"}
{"level":"debug","ts":"2026-07-12T16:57:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9b1e98fc4dcee2e67a6c728c4b4d78c82d420aca7249f30eae1865b02592a58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T16:57:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T16:57:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9b1e98fc4dcee2e67a6c728c4b4d78c82d420aca7249f30eae1865b02592a58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:57:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9b1e98fc4dcee2e67a6c728c4b4d78c82d420aca7249f30eae1865b02592a58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:57:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9b1e98fc4dcee2e67a6c728c4b4d78c82d420aca7249f30eae1865b02592a58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:57:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:57:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:57:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9b1e98fc4dcee2e67a6c728c4b4d78c82d420aca7249f30eae1865b02592a58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:57:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9b1e98fc4dcee2e67a6c728c4b4d78c82d420aca7249f30eae1865b02592a58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:57:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9b1e98fc4dcee2e67a6c728c4b4d78c82d420aca7249f30eae1865b02592a58","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T16:57:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9b1e98fc4dcee2e67a6c728c4b4d78c82d420aca7249f30eae1865b02592a58"}
{"level":"debug","ts":"2026-07-12T16:57:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9b1e98fc4dcee2e67a6c728c4b4d78c82d420aca7249f30eae1865b02592a58","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T16:57:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9b1e98fc4dcee2e67a6c728c4b4d78c82d420aca7249f30eae1865b02592a58"}
{"level":"debug","ts":"2026-07-12T16:57:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9b1e98fc4dcee2e67a6c728c4b4d78c82d420aca7249f30eae1865b02592a58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T16:57:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T16:57:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9b1e98fc4dcee2e67a6c728c4b4d78c82d420aca7249f30eae1865b02592a58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:57:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9b1e98fc4dcee2e67a6c728c4b4d78c82d420aca7249f30eae1865b02592a58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:57:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9b1e98fc4dcee2e67a6c728c4b4d78c82d420aca7249f30eae1865b02592a58","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T16:57:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9b1e98fc4dcee2e67a6c728c4b4d78c82d420aca7249f30eae1865b02592a58"}
{"level":"info","ts":"2026-07-12T16:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/856bf89d0753f2d3ff3bb1c56e08660bdb1e6c75987c8f46a163c4c911e954ce"}
{"level":"info","ts":"2026-07-12T16:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f51e130b2f8d26af4fb74a3b198462b34e05fefa556f5cb149fd94d7e719cea0"}
{"level":"info","ts":"2026-07-12T16:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4200f6293adafc06ff5dbae9f907e017cbe49361d04079782a8fb2a2876068d0"}
{"level":"info","ts":"2026-07-12T16:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8e25cb71e670b490abb68346bcf663ab4eacdf75e4f124a6e4333e8dbc3457a2"}
{"level":"info","ts":"2026-07-12T16:57:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c912ba81d9b11d4c04e440725aec5ca0b3ef174699ea189de463072d99a0f050"}
{"level":"info","ts":"2026-07-12T16:57:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c206603f2017af2a8cbaaf59322aa135ae4f69583a726a5fc9c251d336435e06"}
{"level":"info","ts":"2026-07-12T16:57:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a9b1e98fc4dcee2e67a6c728c4b4d78c82d420aca7249f30eae1865b02592a58"}
{"level":"info","ts":"2026-07-12T16:57:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e1cd785cb2c4f1b1f4ec355655e563f17ddd5cd18ac91f98087df54084c9f916"}
{"level":"debug","ts":"2026-07-12T16:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef3f928a695ac44b935906b3a78183c93fd5f3698fd43b59e2a722012ab3523b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:59:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:59:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef3f928a695ac44b935906b3a78183c93fd5f3698fd43b59e2a722012ab3523b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef3f928a695ac44b935906b3a78183c93fd5f3698fd43b59e2a722012ab3523b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:59:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:59:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef3f928a695ac44b935906b3a78183c93fd5f3698fd43b59e2a722012ab3523b"}
{"level":"info","ts":"2026-07-12T16:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef3f928a695ac44b935906b3a78183c93fd5f3698fd43b59e2a722012ab3523b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef3f928a695ac44b935906b3a78183c93fd5f3698fd43b59e2a722012ab3523b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:59:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:59:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-12T16:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ef3f928a695ac44b935906b3a78183c93fd5f3698fd43b59e2a722012ab3523b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ef3f928a695ac44b935906b3a78183c93fd5f3698fd43b59e2a722012ab3523b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-12T16:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef3f928a695ac44b935906b3a78183c93fd5f3698fd43b59e2a722012ab3523b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef3f928a695ac44b935906b3a78183c93fd5f3698fd43b59e2a722012ab3523b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T16:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef3f928a695ac44b935906b3a78183c93fd5f3698fd43b59e2a722012ab3523b"}
{"level":"info","ts":"2026-07-12T16:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef3f928a695ac44b935906b3a78183c93fd5f3698fd43b59e2a722012ab3523b"}
{"level":"debug","ts":"2026-07-12T16:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef3f928a695ac44b935906b3a78183c93fd5f3698fd43b59e2a722012ab3523b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T16:59:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T16:59:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef3f928a695ac44b935906b3a78183c93fd5f3698fd43b59e2a722012ab3523b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef3f928a695ac44b935906b3a78183c93fd5f3698fd43b59e2a722012ab3523b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef3f928a695ac44b935906b3a78183c93fd5f3698fd43b59e2a722012ab3523b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:59:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:59:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef3f928a695ac44b935906b3a78183c93fd5f3698fd43b59e2a722012ab3523b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef3f928a695ac44b935906b3a78183c93fd5f3698fd43b59e2a722012ab3523b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef3f928a695ac44b935906b3a78183c93fd5f3698fd43b59e2a722012ab3523b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T16:59:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef3f928a695ac44b935906b3a78183c93fd5f3698fd43b59e2a722012ab3523b"}
{"level":"debug","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef3f928a695ac44b935906b3a78183c93fd5f3698fd43b59e2a722012ab3523b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef3f928a695ac44b935906b3a78183c93fd5f3698fd43b59e2a722012ab3523b"}
{"level":"debug","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1e8ec801bc2237719ed329182e18687b8a4532a751ad001d55f0caf1ebb5926","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1e8ec801bc2237719ed329182e18687b8a4532a751ad001d55f0caf1ebb5926","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef3f928a695ac44b935906b3a78183c93fd5f3698fd43b59e2a722012ab3523b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef3f928a695ac44b935906b3a78183c93fd5f3698fd43b59e2a722012ab3523b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1e8ec801bc2237719ed329182e18687b8a4532a751ad001d55f0caf1ebb5926"}
{"level":"info","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef3f928a695ac44b935906b3a78183c93fd5f3698fd43b59e2a722012ab3523b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1e8ec801bc2237719ed329182e18687b8a4532a751ad001d55f0caf1ebb5926","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1e8ec801bc2237719ed329182e18687b8a4532a751ad001d55f0caf1ebb5926","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef3f928a695ac44b935906b3a78183c93fd5f3698fd43b59e2a722012ab3523b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1e8ec801bc2237719ed329182e18687b8a4532a751ad001d55f0caf1ebb5926","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1e8ec801bc2237719ed329182e18687b8a4532a751ad001d55f0caf1ebb5926"}
{"level":"debug","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1e8ec801bc2237719ed329182e18687b8a4532a751ad001d55f0caf1ebb5926","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c1e8ec801bc2237719ed329182e18687b8a4532a751ad001d55f0caf1ebb5926"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1e8ec801bc2237719ed329182e18687b8a4532a751ad001d55f0caf1ebb5926","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1e8ec801bc2237719ed329182e18687b8a4532a751ad001d55f0caf1ebb5926","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef3f928a695ac44b935906b3a78183c93fd5f3698fd43b59e2a722012ab3523b"}
{"level":"info","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1e8ec801bc2237719ed329182e18687b8a4532a751ad001d55f0caf1ebb5926"}
{"level":"debug","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c447acc764c15c50ea55b715f508352365bfefce86912d187053f8c65fec5737","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c447acc764c15c50ea55b715f508352365bfefce86912d187053f8c65fec5737","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"437f16a6776137cc60ba8b73365431e51c8a343382f13d887b3eab13d939f26b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c447acc764c15c50ea55b715f508352365bfefce86912d187053f8c65fec5737"}
{"level":"info","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"437f16a6776137cc60ba8b73365431e51c8a343382f13d887b3eab13d939f26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c447acc764c15c50ea55b715f508352365bfefce86912d187053f8c65fec5737","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c447acc764c15c50ea55b715f508352365bfefce86912d187053f8c65fec5737"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/437f16a6776137cc60ba8b73365431e51c8a343382f13d887b3eab13d939f26b"}
{"level":"info","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c447acc764c15c50ea55b715f508352365bfefce86912d187053f8c65fec5737","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"437f16a6776137cc60ba8b73365431e51c8a343382f13d887b3eab13d939f26b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["437f16a6776137cc60ba8b73365431e51c8a343382f13d887b3eab13d939f26b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"437f16a6776137cc60ba8b73365431e51c8a343382f13d887b3eab13d939f26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c447acc764c15c50ea55b715f508352365bfefce86912d187053f8c65fec5737","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c447acc764c15c50ea55b715f508352365bfefce86912d187053f8c65fec5737"}
{"level":"info","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c447acc764c15c50ea55b715f508352365bfefce86912d187053f8c65fec5737","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"437f16a6776137cc60ba8b73365431e51c8a343382f13d887b3eab13d939f26b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"437f16a6776137cc60ba8b73365431e51c8a343382f13d887b3eab13d939f26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c447acc764c15c50ea55b715f508352365bfefce86912d187053f8c65fec5737","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c447acc764c15c50ea55b715f508352365bfefce86912d187053f8c65fec5737"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/437f16a6776137cc60ba8b73365431e51c8a343382f13d887b3eab13d939f26b"}
{"level":"info","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c447acc764c15c50ea55b715f508352365bfefce86912d187053f8c65fec5737","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"437f16a6776137cc60ba8b73365431e51c8a343382f13d887b3eab13d939f26b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["437f16a6776137cc60ba8b73365431e51c8a343382f13d887b3eab13d939f26b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c447acc764c15c50ea55b715f508352365bfefce86912d187053f8c65fec5737"}
{"level":"info","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"437f16a6776137cc60ba8b73365431e51c8a343382f13d887b3eab13d939f26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c447acc764c15c50ea55b715f508352365bfefce86912d187053f8c65fec5737","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a63c2f1734ee1ad7069cec3400057c03a5dd359bd5bee2747d48b190443e2f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a63c2f1734ee1ad7069cec3400057c03a5dd359bd5bee2747d48b190443e2f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"437f16a6776137cc60ba8b73365431e51c8a343382f13d887b3eab13d939f26b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/437f16a6776137cc60ba8b73365431e51c8a343382f13d887b3eab13d939f26b"}
{"level":"info","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"437f16a6776137cc60ba8b73365431e51c8a343382f13d887b3eab13d939f26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a63c2f1734ee1ad7069cec3400057c03a5dd359bd5bee2747d48b190443e2f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a63c2f1734ee1ad7069cec3400057c03a5dd359bd5bee2747d48b190443e2f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"437f16a6776137cc60ba8b73365431e51c8a343382f13d887b3eab13d939f26b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["437f16a6776137cc60ba8b73365431e51c8a343382f13d887b3eab13d939f26b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a63c2f1734ee1ad7069cec3400057c03a5dd359bd5bee2747d48b190443e2f6"}
{"level":"info","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"437f16a6776137cc60ba8b73365431e51c8a343382f13d887b3eab13d939f26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a63c2f1734ee1ad7069cec3400057c03a5dd359bd5bee2747d48b190443e2f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a63c2f1734ee1ad7069cec3400057c03a5dd359bd5bee2747d48b190443e2f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c447acc764c15c50ea55b715f508352365bfefce86912d187053f8c65fec5737"}
{"level":"info","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a63c2f1734ee1ad7069cec3400057c03a5dd359bd5bee2747d48b190443e2f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"437f16a6776137cc60ba8b73365431e51c8a343382f13d887b3eab13d939f26b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"437f16a6776137cc60ba8b73365431e51c8a343382f13d887b3eab13d939f26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a63c2f1734ee1ad7069cec3400057c03a5dd359bd5bee2747d48b190443e2f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"437f16a6776137cc60ba8b73365431e51c8a343382f13d887b3eab13d939f26b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/437f16a6776137cc60ba8b73365431e51c8a343382f13d887b3eab13d939f26b"}
{"level":"debug","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"437f16a6776137cc60ba8b73365431e51c8a343382f13d887b3eab13d939f26b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["437f16a6776137cc60ba8b73365431e51c8a343382f13d887b3eab13d939f26b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"437f16a6776137cc60ba8b73365431e51c8a343382f13d887b3eab13d939f26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"437f16a6776137cc60ba8b73365431e51c8a343382f13d887b3eab13d939f26b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a63c2f1734ee1ad7069cec3400057c03a5dd359bd5bee2747d48b190443e2f6"}
{"level":"info","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/437f16a6776137cc60ba8b73365431e51c8a343382f13d887b3eab13d939f26b"}
{"level":"debug","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e258f419871630441b0ea59b862ed82f1a1dd3ec3a6f48eafabd3f21b663760","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e258f419871630441b0ea59b862ed82f1a1dd3ec3a6f48eafabd3f21b663760","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e258f419871630441b0ea59b862ed82f1a1dd3ec3a6f48eafabd3f21b663760","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e258f419871630441b0ea59b862ed82f1a1dd3ec3a6f48eafabd3f21b663760"}
{"level":"info","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e258f419871630441b0ea59b862ed82f1a1dd3ec3a6f48eafabd3f21b663760","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e258f419871630441b0ea59b862ed82f1a1dd3ec3a6f48eafabd3f21b663760","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0e258f419871630441b0ea59b862ed82f1a1dd3ec3a6f48eafabd3f21b663760","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0e258f419871630441b0ea59b862ed82f1a1dd3ec3a6f48eafabd3f21b663760\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e258f419871630441b0ea59b862ed82f1a1dd3ec3a6f48eafabd3f21b663760","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e258f419871630441b0ea59b862ed82f1a1dd3ec3a6f48eafabd3f21b663760","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e258f419871630441b0ea59b862ed82f1a1dd3ec3a6f48eafabd3f21b663760"}
{"level":"info","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e258f419871630441b0ea59b862ed82f1a1dd3ec3a6f48eafabd3f21b663760"}
{"level":"debug","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e258f419871630441b0ea59b862ed82f1a1dd3ec3a6f48eafabd3f21b663760","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e258f419871630441b0ea59b862ed82f1a1dd3ec3a6f48eafabd3f21b663760"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e258f419871630441b0ea59b862ed82f1a1dd3ec3a6f48eafabd3f21b663760","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e258f419871630441b0ea59b862ed82f1a1dd3ec3a6f48eafabd3f21b663760","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e258f419871630441b0ea59b862ed82f1a1dd3ec3a6f48eafabd3f21b663760"}
{"level":"debug","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e68af9d84c66b97691b189f05d8e11b235576a99696c9f5346b42065fc5e96fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e68af9d84c66b97691b189f05d8e11b235576a99696c9f5346b42065fc5e96fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e68af9d84c66b97691b189f05d8e11b235576a99696c9f5346b42065fc5e96fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e68af9d84c66b97691b189f05d8e11b235576a99696c9f5346b42065fc5e96fe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e68af9d84c66b97691b189f05d8e11b235576a99696c9f5346b42065fc5e96fe"}
{"level":"debug","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e68af9d84c66b97691b189f05d8e11b235576a99696c9f5346b42065fc5e96fe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e68af9d84c66b97691b189f05d8e11b235576a99696c9f5346b42065fc5e96fe"}
{"level":"debug","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e68af9d84c66b97691b189f05d8e11b235576a99696c9f5346b42065fc5e96fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e68af9d84c66b97691b189f05d8e11b235576a99696c9f5346b42065fc5e96fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e68af9d84c66b97691b189f05d8e11b235576a99696c9f5346b42065fc5e96fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e68af9d84c66b97691b189f05d8e11b235576a99696c9f5346b42065fc5e96fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e68af9d84c66b97691b189f05d8e11b235576a99696c9f5346b42065fc5e96fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02234b9e5890f949d7b3db924110d3167e34c28db87f5bf932c5786396c96239","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e68af9d84c66b97691b189f05d8e11b235576a99696c9f5346b42065fc5e96fe"}
{"level":"info","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02234b9e5890f949d7b3db924110d3167e34c28db87f5bf932c5786396c96239","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e68af9d84c66b97691b189f05d8e11b235576a99696c9f5346b42065fc5e96fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e68af9d84c66b97691b189f05d8e11b235576a99696c9f5346b42065fc5e96fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e68af9d84c66b97691b189f05d8e11b235576a99696c9f5346b42065fc5e96fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02234b9e5890f949d7b3db924110d3167e34c28db87f5bf932c5786396c96239","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02234b9e5890f949d7b3db924110d3167e34c28db87f5bf932c5786396c96239"}
{"level":"info","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02234b9e5890f949d7b3db924110d3167e34c28db87f5bf932c5786396c96239","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e68af9d84c66b97691b189f05d8e11b235576a99696c9f5346b42065fc5e96fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e68af9d84c66b97691b189f05d8e11b235576a99696c9f5346b42065fc5e96fe"}
{"level":"info","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e68af9d84c66b97691b189f05d8e11b235576a99696c9f5346b42065fc5e96fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02234b9e5890f949d7b3db924110d3167e34c28db87f5bf932c5786396c96239","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e68af9d84c66b97691b189f05d8e11b235576a99696c9f5346b42065fc5e96fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e68af9d84c66b97691b189f05d8e11b235576a99696c9f5346b42065fc5e96fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e68af9d84c66b97691b189f05d8e11b235576a99696c9f5346b42065fc5e96fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e68af9d84c66b97691b189f05d8e11b235576a99696c9f5346b42065fc5e96fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e68af9d84c66b97691b189f05d8e11b235576a99696c9f5346b42065fc5e96fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e68af9d84c66b97691b189f05d8e11b235576a99696c9f5346b42065fc5e96fe","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e68af9d84c66b97691b189f05d8e11b235576a99696c9f5346b42065fc5e96fe\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e68af9d84c66b97691b189f05d8e11b235576a99696c9f5346b42065fc5e96fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02234b9e5890f949d7b3db924110d3167e34c28db87f5bf932c5786396c96239","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02234b9e5890f949d7b3db924110d3167e34c28db87f5bf932c5786396c96239"}
{"level":"debug","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e68af9d84c66b97691b189f05d8e11b235576a99696c9f5346b42065fc5e96fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e68af9d84c66b97691b189f05d8e11b235576a99696c9f5346b42065fc5e96fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e68af9d84c66b97691b189f05d8e11b235576a99696c9f5346b42065fc5e96fe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e68af9d84c66b97691b189f05d8e11b235576a99696c9f5346b42065fc5e96fe"}
{"level":"debug","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e68af9d84c66b97691b189f05d8e11b235576a99696c9f5346b42065fc5e96fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e5a55606479a9452f103cb5fb40857ac0ad805336d83bbdfec7e599c9b3e724","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e68af9d84c66b97691b189f05d8e11b235576a99696c9f5346b42065fc5e96fe"}
{"level":"info","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e5a55606479a9452f103cb5fb40857ac0ad805336d83bbdfec7e599c9b3e724","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02234b9e5890f949d7b3db924110d3167e34c28db87f5bf932c5786396c96239","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02234b9e5890f949d7b3db924110d3167e34c28db87f5bf932c5786396c96239"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02234b9e5890f949d7b3db924110d3167e34c28db87f5bf932c5786396c96239","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e68af9d84c66b97691b189f05d8e11b235576a99696c9f5346b42065fc5e96fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e68af9d84c66b97691b189f05d8e11b235576a99696c9f5346b42065fc5e96fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e5a55606479a9452f103cb5fb40857ac0ad805336d83bbdfec7e599c9b3e724"}
{"level":"info","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e68af9d84c66b97691b189f05d8e11b235576a99696c9f5346b42065fc5e96fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e5a55606479a9452f103cb5fb40857ac0ad805336d83bbdfec7e599c9b3e724","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e5a55606479a9452f103cb5fb40857ac0ad805336d83bbdfec7e599c9b3e724"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e5a55606479a9452f103cb5fb40857ac0ad805336d83bbdfec7e599c9b3e724","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02234b9e5890f949d7b3db924110d3167e34c28db87f5bf932c5786396c96239","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02234b9e5890f949d7b3db924110d3167e34c28db87f5bf932c5786396c96239"}
{"level":"info","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02234b9e5890f949d7b3db924110d3167e34c28db87f5bf932c5786396c96239","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e68af9d84c66b97691b189f05d8e11b235576a99696c9f5346b42065fc5e96fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e5a55606479a9452f103cb5fb40857ac0ad805336d83bbdfec7e599c9b3e724","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e5a55606479a9452f103cb5fb40857ac0ad805336d83bbdfec7e599c9b3e724"}
{"level":"info","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e5a55606479a9452f103cb5fb40857ac0ad805336d83bbdfec7e599c9b3e724","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02234b9e5890f949d7b3db924110d3167e34c28db87f5bf932c5786396c96239","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02234b9e5890f949d7b3db924110d3167e34c28db87f5bf932c5786396c96239"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02234b9e5890f949d7b3db924110d3167e34c28db87f5bf932c5786396c96239","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e5a55606479a9452f103cb5fb40857ac0ad805336d83bbdfec7e599c9b3e724","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e5a55606479a9452f103cb5fb40857ac0ad805336d83bbdfec7e599c9b3e724"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e68af9d84c66b97691b189f05d8e11b235576a99696c9f5346b42065fc5e96fe"}
{"level":"info","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e5a55606479a9452f103cb5fb40857ac0ad805336d83bbdfec7e599c9b3e724","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02234b9e5890f949d7b3db924110d3167e34c28db87f5bf932c5786396c96239","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02234b9e5890f949d7b3db924110d3167e34c28db87f5bf932c5786396c96239","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e5a55606479a9452f103cb5fb40857ac0ad805336d83bbdfec7e599c9b3e724","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02234b9e5890f949d7b3db924110d3167e34c28db87f5bf932c5786396c96239"}
{"level":"debug","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02234b9e5890f949d7b3db924110d3167e34c28db87f5bf932c5786396c96239","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02234b9e5890f949d7b3db924110d3167e34c28db87f5bf932c5786396c96239"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02234b9e5890f949d7b3db924110d3167e34c28db87f5bf932c5786396c96239","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02234b9e5890f949d7b3db924110d3167e34c28db87f5bf932c5786396c96239","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02234b9e5890f949d7b3db924110d3167e34c28db87f5bf932c5786396c96239"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"02234b9e5890f949d7b3db924110d3167e34c28db87f5bf932c5786396c96239","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"02234b9e5890f949d7b3db924110d3167e34c28db87f5bf932c5786396c96239\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02234b9e5890f949d7b3db924110d3167e34c28db87f5bf932c5786396c96239","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e5a55606479a9452f103cb5fb40857ac0ad805336d83bbdfec7e599c9b3e724"}
{"level":"debug","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02234b9e5890f949d7b3db924110d3167e34c28db87f5bf932c5786396c96239","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:59:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02234b9e5890f949d7b3db924110d3167e34c28db87f5bf932c5786396c96239","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02234b9e5890f949d7b3db924110d3167e34c28db87f5bf932c5786396c96239","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02234b9e5890f949d7b3db924110d3167e34c28db87f5bf932c5786396c96239"}
{"level":"debug","ts":"2026-07-12T16:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02234b9e5890f949d7b3db924110d3167e34c28db87f5bf932c5786396c96239","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02234b9e5890f949d7b3db924110d3167e34c28db87f5bf932c5786396c96239","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T16:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02234b9e5890f949d7b3db924110d3167e34c28db87f5bf932c5786396c96239"}
{"level":"debug","ts":"2026-07-12T16:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde725f804d58a7e7859b0c4b3a9348bdf4b81e2f40411a393dba54693dea98e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:59:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:59:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cde725f804d58a7e7859b0c4b3a9348bdf4b81e2f40411a393dba54693dea98e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cde725f804d58a7e7859b0c4b3a9348bdf4b81e2f40411a393dba54693dea98e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cde725f804d58a7e7859b0c4b3a9348bdf4b81e2f40411a393dba54693dea98e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T16:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde725f804d58a7e7859b0c4b3a9348bdf4b81e2f40411a393dba54693dea98e"}
{"level":"debug","ts":"2026-07-12T16:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02234b9e5890f949d7b3db924110d3167e34c28db87f5bf932c5786396c96239","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T16:59:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T16:59:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02234b9e5890f949d7b3db924110d3167e34c28db87f5bf932c5786396c96239"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02234b9e5890f949d7b3db924110d3167e34c28db87f5bf932c5786396c96239","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cde725f804d58a7e7859b0c4b3a9348bdf4b81e2f40411a393dba54693dea98e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02234b9e5890f949d7b3db924110d3167e34c28db87f5bf932c5786396c96239","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T16:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde725f804d58a7e7859b0c4b3a9348bdf4b81e2f40411a393dba54693dea98e"}
{"level":"info","ts":"2026-07-12T16:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02234b9e5890f949d7b3db924110d3167e34c28db87f5bf932c5786396c96239"}
{"level":"debug","ts":"2026-07-12T16:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde725f804d58a7e7859b0c4b3a9348bdf4b81e2f40411a393dba54693dea98e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T16:59:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T16:59:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cde725f804d58a7e7859b0c4b3a9348bdf4b81e2f40411a393dba54693dea98e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cde725f804d58a7e7859b0c4b3a9348bdf4b81e2f40411a393dba54693dea98e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cde725f804d58a7e7859b0c4b3a9348bdf4b81e2f40411a393dba54693dea98e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e943e0125d86596b11aacd89865bc3d2ed7cdfff73ed42379f502f3f4c898bcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:59:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:59:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde725f804d58a7e7859b0c4b3a9348bdf4b81e2f40411a393dba54693dea98e"}
{"level":"info","ts":"2026-07-12T16:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e943e0125d86596b11aacd89865bc3d2ed7cdfff73ed42379f502f3f4c898bcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad434f64c9b7289ecf311bc3c1a7eccfe5074a5763f02eabad7edf9e9ef53955","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:59:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:59:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad434f64c9b7289ecf311bc3c1a7eccfe5074a5763f02eabad7edf9e9ef53955","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e943e0125d86596b11aacd89865bc3d2ed7cdfff73ed42379f502f3f4c898bcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:59:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:59:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e943e0125d86596b11aacd89865bc3d2ed7cdfff73ed42379f502f3f4c898bcd"}
{"level":"info","ts":"2026-07-12T16:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e943e0125d86596b11aacd89865bc3d2ed7cdfff73ed42379f502f3f4c898bcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad434f64c9b7289ecf311bc3c1a7eccfe5074a5763f02eabad7edf9e9ef53955","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:59:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:59:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad434f64c9b7289ecf311bc3c1a7eccfe5074a5763f02eabad7edf9e9ef53955"}
{"level":"info","ts":"2026-07-12T16:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad434f64c9b7289ecf311bc3c1a7eccfe5074a5763f02eabad7edf9e9ef53955","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e943e0125d86596b11aacd89865bc3d2ed7cdfff73ed42379f502f3f4c898bcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad434f64c9b7289ecf311bc3c1a7eccfe5074a5763f02eabad7edf9e9ef53955","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T16:59:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T16:59:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad434f64c9b7289ecf311bc3c1a7eccfe5074a5763f02eabad7edf9e9ef53955"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e943e0125d86596b11aacd89865bc3d2ed7cdfff73ed42379f502f3f4c898bcd"}
{"level":"info","ts":"2026-07-12T16:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad434f64c9b7289ecf311bc3c1a7eccfe5074a5763f02eabad7edf9e9ef53955"}
{"level":"info","ts":"2026-07-12T16:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad434f64c9b7289ecf311bc3c1a7eccfe5074a5763f02eabad7edf9e9ef53955","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e943e0125d86596b11aacd89865bc3d2ed7cdfff73ed42379f502f3f4c898bcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T16:59:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T16:59:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e943e0125d86596b11aacd89865bc3d2ed7cdfff73ed42379f502f3f4c898bcd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad434f64c9b7289ecf311bc3c1a7eccfe5074a5763f02eabad7edf9e9ef53955"}
{"level":"info","ts":"2026-07-12T16:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e943e0125d86596b11aacd89865bc3d2ed7cdfff73ed42379f502f3f4c898bcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad434f64c9b7289ecf311bc3c1a7eccfe5074a5763f02eabad7edf9e9ef53955","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e943e0125d86596b11aacd89865bc3d2ed7cdfff73ed42379f502f3f4c898bcd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T16:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e943e0125d86596b11aacd89865bc3d2ed7cdfff73ed42379f502f3f4c898bcd"}
{"level":"debug","ts":"2026-07-12T16:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c71fb8a3fcb5ea40768671362679a17b840b8b2d467c46421d9681683705d454","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:59:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:59:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c71fb8a3fcb5ea40768671362679a17b840b8b2d467c46421d9681683705d454","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c71fb8a3fcb5ea40768671362679a17b840b8b2d467c46421d9681683705d454","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c71fb8a3fcb5ea40768671362679a17b840b8b2d467c46421d9681683705d454","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T16:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c71fb8a3fcb5ea40768671362679a17b840b8b2d467c46421d9681683705d454"}
{"level":"debug","ts":"2026-07-12T16:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c71fb8a3fcb5ea40768671362679a17b840b8b2d467c46421d9681683705d454","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T16:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c71fb8a3fcb5ea40768671362679a17b840b8b2d467c46421d9681683705d454"}
{"level":"debug","ts":"2026-07-12T16:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c71fb8a3fcb5ea40768671362679a17b840b8b2d467c46421d9681683705d454","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T16:59:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T16:59:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c71fb8a3fcb5ea40768671362679a17b840b8b2d467c46421d9681683705d454"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c71fb8a3fcb5ea40768671362679a17b840b8b2d467c46421d9681683705d454","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c71fb8a3fcb5ea40768671362679a17b840b8b2d467c46421d9681683705d454","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:59:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:59:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c71fb8a3fcb5ea40768671362679a17b840b8b2d467c46421d9681683705d454","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c71fb8a3fcb5ea40768671362679a17b840b8b2d467c46421d9681683705d454","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c71fb8a3fcb5ea40768671362679a17b840b8b2d467c46421d9681683705d454","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T16:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c71fb8a3fcb5ea40768671362679a17b840b8b2d467c46421d9681683705d454"}
{"level":"debug","ts":"2026-07-12T16:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c71fb8a3fcb5ea40768671362679a17b840b8b2d467c46421d9681683705d454","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T16:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c71fb8a3fcb5ea40768671362679a17b840b8b2d467c46421d9681683705d454"}
{"level":"debug","ts":"2026-07-12T16:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c71fb8a3fcb5ea40768671362679a17b840b8b2d467c46421d9681683705d454","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T16:59:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T16:59:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c71fb8a3fcb5ea40768671362679a17b840b8b2d467c46421d9681683705d454"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c71fb8a3fcb5ea40768671362679a17b840b8b2d467c46421d9681683705d454","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c71fb8a3fcb5ea40768671362679a17b840b8b2d467c46421d9681683705d454","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T16:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c71fb8a3fcb5ea40768671362679a17b840b8b2d467c46421d9681683705d454"}
{"level":"debug","ts":"2026-07-12T16:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19f827e52ebc2f6643692df7e59fab6a7e7f91b386bc3aaff0b11480aa047e8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:59:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:59:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19f827e52ebc2f6643692df7e59fab6a7e7f91b386bc3aaff0b11480aa047e8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19f827e52ebc2f6643692df7e59fab6a7e7f91b386bc3aaff0b11480aa047e8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:59:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:59:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19f827e52ebc2f6643692df7e59fab6a7e7f91b386bc3aaff0b11480aa047e8b"}
{"level":"info","ts":"2026-07-12T16:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19f827e52ebc2f6643692df7e59fab6a7e7f91b386bc3aaff0b11480aa047e8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19f827e52ebc2f6643692df7e59fab6a7e7f91b386bc3aaff0b11480aa047e8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:59:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:59:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-12T16:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"19f827e52ebc2f6643692df7e59fab6a7e7f91b386bc3aaff0b11480aa047e8b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"19f827e52ebc2f6643692df7e59fab6a7e7f91b386bc3aaff0b11480aa047e8b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-12T16:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19f827e52ebc2f6643692df7e59fab6a7e7f91b386bc3aaff0b11480aa047e8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19f827e52ebc2f6643692df7e59fab6a7e7f91b386bc3aaff0b11480aa047e8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T16:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19f827e52ebc2f6643692df7e59fab6a7e7f91b386bc3aaff0b11480aa047e8b"}
{"level":"info","ts":"2026-07-12T16:59:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19f827e52ebc2f6643692df7e59fab6a7e7f91b386bc3aaff0b11480aa047e8b"}
{"level":"debug","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa1b0561545cd4332bfd8e55bcd16459c72c13189d35de7acee4a5317fc3f51d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:59:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:59:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa1b0561545cd4332bfd8e55bcd16459c72c13189d35de7acee4a5317fc3f51d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19f827e52ebc2f6643692df7e59fab6a7e7f91b386bc3aaff0b11480aa047e8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T16:59:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T16:59:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19f827e52ebc2f6643692df7e59fab6a7e7f91b386bc3aaff0b11480aa047e8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa1b0561545cd4332bfd8e55bcd16459c72c13189d35de7acee4a5317fc3f51d"}
{"level":"info","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa1b0561545cd4332bfd8e55bcd16459c72c13189d35de7acee4a5317fc3f51d"}
{"level":"info","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19f827e52ebc2f6643692df7e59fab6a7e7f91b386bc3aaff0b11480aa047e8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa1b0561545cd4332bfd8e55bcd16459c72c13189d35de7acee4a5317fc3f51d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T16:59:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T16:59:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa1b0561545cd4332bfd8e55bcd16459c72c13189d35de7acee4a5317fc3f51d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19f827e52ebc2f6643692df7e59fab6a7e7f91b386bc3aaff0b11480aa047e8b"}
{"level":"info","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa1b0561545cd4332bfd8e55bcd16459c72c13189d35de7acee4a5317fc3f51d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19f827e52ebc2f6643692df7e59fab6a7e7f91b386bc3aaff0b11480aa047e8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa1b0561545cd4332bfd8e55bcd16459c72c13189d35de7acee4a5317fc3f51d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa1b0561545cd4332bfd8e55bcd16459c72c13189d35de7acee4a5317fc3f51d"}
{"level":"debug","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf1a80b34a50c0f09df638139f9ea73e1f5ce7c612de59971193560aea3c83d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:59:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:59:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf1a80b34a50c0f09df638139f9ea73e1f5ce7c612de59971193560aea3c83d8"}
{"level":"info","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf1a80b34a50c0f09df638139f9ea73e1f5ce7c612de59971193560aea3c83d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf1a80b34a50c0f09df638139f9ea73e1f5ce7c612de59971193560aea3c83d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T16:59:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T16:59:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bf1a80b34a50c0f09df638139f9ea73e1f5ce7c612de59971193560aea3c83d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf1a80b34a50c0f09df638139f9ea73e1f5ce7c612de59971193560aea3c83d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf1a80b34a50c0f09df638139f9ea73e1f5ce7c612de59971193560aea3c83d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:59:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:59:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf1a80b34a50c0f09df638139f9ea73e1f5ce7c612de59971193560aea3c83d8"}
{"level":"error","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bf1a80b34a50c0f09df638139f9ea73e1f5ce7c612de59971193560aea3c83d8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bf1a80b34a50c0f09df638139f9ea73e1f5ce7c612de59971193560aea3c83d8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf1a80b34a50c0f09df638139f9ea73e1f5ce7c612de59971193560aea3c83d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:59:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:59:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf1a80b34a50c0f09df638139f9ea73e1f5ce7c612de59971193560aea3c83d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf1a80b34a50c0f09df638139f9ea73e1f5ce7c612de59971193560aea3c83d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:59:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:59:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf1a80b34a50c0f09df638139f9ea73e1f5ce7c612de59971193560aea3c83d8"}
{"level":"error","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bf1a80b34a50c0f09df638139f9ea73e1f5ce7c612de59971193560aea3c83d8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bf1a80b34a50c0f09df638139f9ea73e1f5ce7c612de59971193560aea3c83d8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cde92dd7726d79f7bd551b9e7763c74ee5b8a1b8410d89a303259049c0839ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:59:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:59:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cde92dd7726d79f7bd551b9e7763c74ee5b8a1b8410d89a303259049c0839ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf1a80b34a50c0f09df638139f9ea73e1f5ce7c612de59971193560aea3c83d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ad62af8d9ee34a2581185c374677188874f92016ead4bf32729c9fc9917fab3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:59:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:59:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf1a80b34a50c0f09df638139f9ea73e1f5ce7c612de59971193560aea3c83d8"}
{"level":"info","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ad62af8d9ee34a2581185c374677188874f92016ead4bf32729c9fc9917fab3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cde92dd7726d79f7bd551b9e7763c74ee5b8a1b8410d89a303259049c0839ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:59:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:59:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cde92dd7726d79f7bd551b9e7763c74ee5b8a1b8410d89a303259049c0839ec"}
{"level":"info","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cde92dd7726d79f7bd551b9e7763c74ee5b8a1b8410d89a303259049c0839ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ad62af8d9ee34a2581185c374677188874f92016ead4bf32729c9fc9917fab3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:59:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:59:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ad62af8d9ee34a2581185c374677188874f92016ead4bf32729c9fc9917fab3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cde92dd7726d79f7bd551b9e7763c74ee5b8a1b8410d89a303259049c0839ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T16:59:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T16:59:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5cde92dd7726d79f7bd551b9e7763c74ee5b8a1b8410d89a303259049c0839ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ad62af8d9ee34a2581185c374677188874f92016ead4bf32729c9fc9917fab3"}
{"level":"info","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cde92dd7726d79f7bd551b9e7763c74ee5b8a1b8410d89a303259049c0839ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf1a80b34a50c0f09df638139f9ea73e1f5ce7c612de59971193560aea3c83d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T16:59:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T16:59:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bf1a80b34a50c0f09df638139f9ea73e1f5ce7c612de59971193560aea3c83d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cde92dd7726d79f7bd551b9e7763c74ee5b8a1b8410d89a303259049c0839ec"}
{"level":"info","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf1a80b34a50c0f09df638139f9ea73e1f5ce7c612de59971193560aea3c83d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ad62af8d9ee34a2581185c374677188874f92016ead4bf32729c9fc9917fab3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cde92dd7726d79f7bd551b9e7763c74ee5b8a1b8410d89a303259049c0839ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf1a80b34a50c0f09df638139f9ea73e1f5ce7c612de59971193560aea3c83d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ad62af8d9ee34a2581185c374677188874f92016ead4bf32729c9fc9917fab3"}
{"level":"debug","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ad62af8d9ee34a2581185c374677188874f92016ead4bf32729c9fc9917fab3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T16:59:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T16:59:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ad62af8d9ee34a2581185c374677188874f92016ead4bf32729c9fc9917fab3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ad62af8d9ee34a2581185c374677188874f92016ead4bf32729c9fc9917fab3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ad62af8d9ee34a2581185c374677188874f92016ead4bf32729c9fc9917fab3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cde92dd7726d79f7bd551b9e7763c74ee5b8a1b8410d89a303259049c0839ec"}
{"level":"info","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf1a80b34a50c0f09df638139f9ea73e1f5ce7c612de59971193560aea3c83d8"}
{"level":"info","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ad62af8d9ee34a2581185c374677188874f92016ead4bf32729c9fc9917fab3"}
{"level":"debug","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e348a5d50f312c530ae0ac7a0cd4fb41dd2fd2e540995dcef639ccdf8f6cebdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:59:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:59:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e348a5d50f312c530ae0ac7a0cd4fb41dd2fd2e540995dcef639ccdf8f6cebdb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"777cc04c241c73a4ed11c50b267ee1622708bd0753cd9a2a0c03fcfab08a15c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:59:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:59:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e348a5d50f312c530ae0ac7a0cd4fb41dd2fd2e540995dcef639ccdf8f6cebdb"}
{"level":"info","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"777cc04c241c73a4ed11c50b267ee1622708bd0753cd9a2a0c03fcfab08a15c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e348a5d50f312c530ae0ac7a0cd4fb41dd2fd2e540995dcef639ccdf8f6cebdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T16:59:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T16:59:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e348a5d50f312c530ae0ac7a0cd4fb41dd2fd2e540995dcef639ccdf8f6cebdb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/777cc04c241c73a4ed11c50b267ee1622708bd0753cd9a2a0c03fcfab08a15c1"}
{"level":"info","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e348a5d50f312c530ae0ac7a0cd4fb41dd2fd2e540995dcef639ccdf8f6cebdb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"865be8185cd42264dee5f368a1045cb11008c975bb5a45e1be84c3f884cd405a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:59:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:59:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"865be8185cd42264dee5f368a1045cb11008c975bb5a45e1be84c3f884cd405a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"777cc04c241c73a4ed11c50b267ee1622708bd0753cd9a2a0c03fcfab08a15c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T16:59:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T16:59:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["777cc04c241c73a4ed11c50b267ee1622708bd0753cd9a2a0c03fcfab08a15c1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e348a5d50f312c530ae0ac7a0cd4fb41dd2fd2e540995dcef639ccdf8f6cebdb"}
{"level":"info","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"777cc04c241c73a4ed11c50b267ee1622708bd0753cd9a2a0c03fcfab08a15c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e348a5d50f312c530ae0ac7a0cd4fb41dd2fd2e540995dcef639ccdf8f6cebdb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"865be8185cd42264dee5f368a1045cb11008c975bb5a45e1be84c3f884cd405a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:59:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:59:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"865be8185cd42264dee5f368a1045cb11008c975bb5a45e1be84c3f884cd405a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"777cc04c241c73a4ed11c50b267ee1622708bd0753cd9a2a0c03fcfab08a15c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"865be8185cd42264dee5f368a1045cb11008c975bb5a45e1be84c3f884cd405a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/865be8185cd42264dee5f368a1045cb11008c975bb5a45e1be84c3f884cd405a"}
{"level":"debug","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"865be8185cd42264dee5f368a1045cb11008c975bb5a45e1be84c3f884cd405a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T16:59:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T16:59:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["865be8185cd42264dee5f368a1045cb11008c975bb5a45e1be84c3f884cd405a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/777cc04c241c73a4ed11c50b267ee1622708bd0753cd9a2a0c03fcfab08a15c1"}
{"level":"info","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"865be8185cd42264dee5f368a1045cb11008c975bb5a45e1be84c3f884cd405a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"865be8185cd42264dee5f368a1045cb11008c975bb5a45e1be84c3f884cd405a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e348a5d50f312c530ae0ac7a0cd4fb41dd2fd2e540995dcef639ccdf8f6cebdb"}
{"level":"info","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/865be8185cd42264dee5f368a1045cb11008c975bb5a45e1be84c3f884cd405a"}
{"level":"debug","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edfecddf12d8d2162a7f59cfc67ff60ba4ea250f450928af6f0c09b694cc2119","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:59:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:59:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edfecddf12d8d2162a7f59cfc67ff60ba4ea250f450928af6f0c09b694cc2119","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edfecddf12d8d2162a7f59cfc67ff60ba4ea250f450928af6f0c09b694cc2119","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edfecddf12d8d2162a7f59cfc67ff60ba4ea250f450928af6f0c09b694cc2119","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edfecddf12d8d2162a7f59cfc67ff60ba4ea250f450928af6f0c09b694cc2119"}
{"level":"debug","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edfecddf12d8d2162a7f59cfc67ff60ba4ea250f450928af6f0c09b694cc2119","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edfecddf12d8d2162a7f59cfc67ff60ba4ea250f450928af6f0c09b694cc2119"}
{"level":"debug","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edfecddf12d8d2162a7f59cfc67ff60ba4ea250f450928af6f0c09b694cc2119","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T16:59:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T16:59:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["edfecddf12d8d2162a7f59cfc67ff60ba4ea250f450928af6f0c09b694cc2119"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edfecddf12d8d2162a7f59cfc67ff60ba4ea250f450928af6f0c09b694cc2119","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edfecddf12d8d2162a7f59cfc67ff60ba4ea250f450928af6f0c09b694cc2119","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:59:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:59:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edfecddf12d8d2162a7f59cfc67ff60ba4ea250f450928af6f0c09b694cc2119","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca7b4781d27d74e022c77b8b172fb0f455b3ab97b8335b42494d62b495d7f2e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:59:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:59:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edfecddf12d8d2162a7f59cfc67ff60ba4ea250f450928af6f0c09b694cc2119"}
{"level":"info","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca7b4781d27d74e022c77b8b172fb0f455b3ab97b8335b42494d62b495d7f2e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edfecddf12d8d2162a7f59cfc67ff60ba4ea250f450928af6f0c09b694cc2119","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T16:59:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T16:59:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["edfecddf12d8d2162a7f59cfc67ff60ba4ea250f450928af6f0c09b694cc2119"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edfecddf12d8d2162a7f59cfc67ff60ba4ea250f450928af6f0c09b694cc2119","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca7b4781d27d74e022c77b8b172fb0f455b3ab97b8335b42494d62b495d7f2e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:59:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:59:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca7b4781d27d74e022c77b8b172fb0f455b3ab97b8335b42494d62b495d7f2e2"}
{"level":"info","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca7b4781d27d74e022c77b8b172fb0f455b3ab97b8335b42494d62b495d7f2e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edfecddf12d8d2162a7f59cfc67ff60ba4ea250f450928af6f0c09b694cc2119","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:59:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:59:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edfecddf12d8d2162a7f59cfc67ff60ba4ea250f450928af6f0c09b694cc2119"}
{"level":"info","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edfecddf12d8d2162a7f59cfc67ff60ba4ea250f450928af6f0c09b694cc2119","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca7b4781d27d74e022c77b8b172fb0f455b3ab97b8335b42494d62b495d7f2e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edfecddf12d8d2162a7f59cfc67ff60ba4ea250f450928af6f0c09b694cc2119","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T16:59:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T16:59:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["edfecddf12d8d2162a7f59cfc67ff60ba4ea250f450928af6f0c09b694cc2119"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edfecddf12d8d2162a7f59cfc67ff60ba4ea250f450928af6f0c09b694cc2119","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edfecddf12d8d2162a7f59cfc67ff60ba4ea250f450928af6f0c09b694cc2119","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T16:59:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T16:59:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["edfecddf12d8d2162a7f59cfc67ff60ba4ea250f450928af6f0c09b694cc2119"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca7b4781d27d74e022c77b8b172fb0f455b3ab97b8335b42494d62b495d7f2e2"}
{"level":"error","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"edfecddf12d8d2162a7f59cfc67ff60ba4ea250f450928af6f0c09b694cc2119","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"edfecddf12d8d2162a7f59cfc67ff60ba4ea250f450928af6f0c09b694cc2119\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca7b4781d27d74e022c77b8b172fb0f455b3ab97b8335b42494d62b495d7f2e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T16:59:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T16:59:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca7b4781d27d74e022c77b8b172fb0f455b3ab97b8335b42494d62b495d7f2e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca7b4781d27d74e022c77b8b172fb0f455b3ab97b8335b42494d62b495d7f2e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edfecddf12d8d2162a7f59cfc67ff60ba4ea250f450928af6f0c09b694cc2119","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:59:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:59:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edfecddf12d8d2162a7f59cfc67ff60ba4ea250f450928af6f0c09b694cc2119"}
{"level":"info","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edfecddf12d8d2162a7f59cfc67ff60ba4ea250f450928af6f0c09b694cc2119","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca7b4781d27d74e022c77b8b172fb0f455b3ab97b8335b42494d62b495d7f2e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:59:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:59:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca7b4781d27d74e022c77b8b172fb0f455b3ab97b8335b42494d62b495d7f2e2"}
{"level":"info","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca7b4781d27d74e022c77b8b172fb0f455b3ab97b8335b42494d62b495d7f2e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a38cada856ff3334aeaccc4ae539897c9800a3d2a9e8d621372e75b3d629db76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:59:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:59:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a38cada856ff3334aeaccc4ae539897c9800a3d2a9e8d621372e75b3d629db76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edfecddf12d8d2162a7f59cfc67ff60ba4ea250f450928af6f0c09b694cc2119","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T16:59:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T16:59:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["edfecddf12d8d2162a7f59cfc67ff60ba4ea250f450928af6f0c09b694cc2119"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a38cada856ff3334aeaccc4ae539897c9800a3d2a9e8d621372e75b3d629db76"}
{"level":"info","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edfecddf12d8d2162a7f59cfc67ff60ba4ea250f450928af6f0c09b694cc2119","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca7b4781d27d74e022c77b8b172fb0f455b3ab97b8335b42494d62b495d7f2e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T16:59:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T16:59:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca7b4781d27d74e022c77b8b172fb0f455b3ab97b8335b42494d62b495d7f2e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca7b4781d27d74e022c77b8b172fb0f455b3ab97b8335b42494d62b495d7f2e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a38cada856ff3334aeaccc4ae539897c9800a3d2a9e8d621372e75b3d629db76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T16:59:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T16:59:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a38cada856ff3334aeaccc4ae539897c9800a3d2a9e8d621372e75b3d629db76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edfecddf12d8d2162a7f59cfc67ff60ba4ea250f450928af6f0c09b694cc2119"}
{"level":"info","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a38cada856ff3334aeaccc4ae539897c9800a3d2a9e8d621372e75b3d629db76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edfecddf12d8d2162a7f59cfc67ff60ba4ea250f450928af6f0c09b694cc2119","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca7b4781d27d74e022c77b8b172fb0f455b3ab97b8335b42494d62b495d7f2e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T16:59:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T16:59:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca7b4781d27d74e022c77b8b172fb0f455b3ab97b8335b42494d62b495d7f2e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a38cada856ff3334aeaccc4ae539897c9800a3d2a9e8d621372e75b3d629db76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca7b4781d27d74e022c77b8b172fb0f455b3ab97b8335b42494d62b495d7f2e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca7b4781d27d74e022c77b8b172fb0f455b3ab97b8335b42494d62b495d7f2e2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T16:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca7b4781d27d74e022c77b8b172fb0f455b3ab97b8335b42494d62b495d7f2e2"}
{"level":"debug","ts":"2026-07-12T16:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca7b4781d27d74e022c77b8b172fb0f455b3ab97b8335b42494d62b495d7f2e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T16:59:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T16:59:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca7b4781d27d74e022c77b8b172fb0f455b3ab97b8335b42494d62b495d7f2e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T16:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a38cada856ff3334aeaccc4ae539897c9800a3d2a9e8d621372e75b3d629db76"}
{"level":"info","ts":"2026-07-12T16:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca7b4781d27d74e022c77b8b172fb0f455b3ab97b8335b42494d62b495d7f2e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T16:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca7b4781d27d74e022c77b8b172fb0f455b3ab97b8335b42494d62b495d7f2e2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T16:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edfecddf12d8d2162a7f59cfc67ff60ba4ea250f450928af6f0c09b694cc2119"}
{"level":"info","ts":"2026-07-12T16:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca7b4781d27d74e022c77b8b172fb0f455b3ab97b8335b42494d62b495d7f2e2"}
{"level":"info","ts":"2026-07-12T16:59:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b74670b8-28c8-4395-b974-50994a369af5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49668","PortSpecifier":{"PortValue":49668}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b74670b8-28c8-4395-b974-50994a369af5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-17d27e.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T16:59:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b74670b8-28c8-4395-b974-50994a369af5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49668","PortSpecifier":{"PortValue":49668}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783875569,"nanos":527512066},"http":{"id":"b74670b8-28c8-4395-b974-50994a369af5","method":"POST","headers":{":authority":"e2e-shared-a-17d27e.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T16:59:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b74670b8-28c8-4395-b974-50994a369af5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-12T16:59:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b74670b8-28c8-4395-b974-50994a369af5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3a471a63-af50-485e-8497-6203c5d354e5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=dd8475e3-e7a1-48e6-b180-67063e5b71ec"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bbc8f098c53"]}}
{"level":"debug","ts":"2026-07-12T16:59:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b74670b8-28c8-4395-b974-50994a369af5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bbc8f098c53"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=dd8475e3-e7a1-48e6-b180-67063e5b71ec"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3a471a63-af50-485e-8497-6203c5d354e5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1e5a55606479a9452f103cb5fb40857ac0ad805336d83bbdfec7e599c9b3e724"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.31:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-17d27e.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T16:59:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b74670b8-28c8-4395-b974-50994a369af5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T16:59:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b74670b8-28c8-4395-b974-50994a369af5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T16:59:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b74670b8-28c8-4395-b974-50994a369af5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-17d27e/auth-test-model-17d27e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T16:59:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b74670b8-28c8-4395-b974-50994a369af5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-12T16:59:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b74670b8-28c8-4395-b974-50994a369af5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-12T16:59:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b74670b8-28c8-4395-b974-50994a369af5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-12T16:59:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b74670b8-28c8-4395-b974-50994a369af5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T16:59:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b74670b8-28c8-4395-b974-50994a369af5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T16:59:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5c5caf23-0a4b-4e2d-8bc4-dd093d250a90","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:56310","PortSpecifier":{"PortValue":56310}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5c5caf23-0a4b-4e2d-8bc4-dd093d250a90","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-cc457c.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T16:59:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5c5caf23-0a4b-4e2d-8bc4-dd093d250a90","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:56310","PortSpecifier":{"PortValue":56310}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783875569,"nanos":598361211},"http":{"id":"5c5caf23-0a4b-4e2d-8bc4-dd093d250a90","method":"POST","headers":{":authority":"e2e-shared-b-cc457c.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T16:59:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5c5caf23-0a4b-4e2d-8bc4-dd093d250a90","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-12T16:59:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5c5caf23-0a4b-4e2d-8bc4-dd093d250a90","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3a471a63-af50-485e-8497-6203c5d354e5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=dd8475e3-e7a1-48e6-b180-67063e5b71ec"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bbc8f098c53"]}}
{"level":"debug","ts":"2026-07-12T16:59:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5c5caf23-0a4b-4e2d-8bc4-dd093d250a90","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bbc8f098c53"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=dd8475e3-e7a1-48e6-b180-67063e5b71ec"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3a471a63-af50-485e-8497-6203c5d354e5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0ad62af8d9ee34a2581185c374677188874f92016ead4bf32729c9fc9917fab3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-cc457c.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T16:59:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c5caf23-0a4b-4e2d-8bc4-dd093d250a90","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T16:59:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c5caf23-0a4b-4e2d-8bc4-dd093d250a90","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T16:59:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c5caf23-0a4b-4e2d-8bc4-dd093d250a90","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-cc457c/auth-test-model-cc457c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T16:59:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5c5caf23-0a4b-4e2d-8bc4-dd093d250a90","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-12T16:59:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c5caf23-0a4b-4e2d-8bc4-dd093d250a90","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-12T16:59:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c5caf23-0a4b-4e2d-8bc4-dd093d250a90","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-12T16:59:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5c5caf23-0a4b-4e2d-8bc4-dd093d250a90","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T16:59:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5c5caf23-0a4b-4e2d-8bc4-dd093d250a90","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T16:59:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7a26780d-2b10-4c51-af18-51cbc9bb0657","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49684","PortSpecifier":{"PortValue":49684}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7a26780d-2b10-4c51-af18-51cbc9bb0657","method":"GET","path":"/maas-api/v1/api-keys/4c13b360-da4f-4c1d-8df8-67637db6484b","host":"e2e-shared-a-17d27e.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T16:59:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7a26780d-2b10-4c51-af18-51cbc9bb0657","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49684","PortSpecifier":{"PortValue":49684}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783875569,"nanos":663959624},"http":{"id":"7a26780d-2b10-4c51-af18-51cbc9bb0657","method":"GET","headers":{":authority":"e2e-shared-a-17d27e.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/4c13b360-da4f-4c1d-8df8-67637db6484b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T16:59:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7a26780d-2b10-4c51-af18-51cbc9bb0657","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-12T16:59:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7a26780d-2b10-4c51-af18-51cbc9bb0657","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3a471a63-af50-485e-8497-6203c5d354e5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=dd8475e3-e7a1-48e6-b180-67063e5b71ec"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bbc8f098c53"]}}
{"level":"debug","ts":"2026-07-12T16:59:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7a26780d-2b10-4c51-af18-51cbc9bb0657","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bbc8f098c53"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=dd8475e3-e7a1-48e6-b180-67063e5b71ec"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3a471a63-af50-485e-8497-6203c5d354e5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1e5a55606479a9452f103cb5fb40857ac0ad805336d83bbdfec7e599c9b3e724"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.31:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-17d27e.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/4c13b360-da4f-4c1d-8df8-67637db6484b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T16:59:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a26780d-2b10-4c51-af18-51cbc9bb0657","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T16:59:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a26780d-2b10-4c51-af18-51cbc9bb0657","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T16:59:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a26780d-2b10-4c51-af18-51cbc9bb0657","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-17d27e/auth-test-model-17d27e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T16:59:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7a26780d-2b10-4c51-af18-51cbc9bb0657","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-12T16:59:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7a26780d-2b10-4c51-af18-51cbc9bb0657","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T16:59:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7a26780d-2b10-4c51-af18-51cbc9bb0657","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-12T16:59:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7a26780d-2b10-4c51-af18-51cbc9bb0657","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T16:59:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7a26780d-2b10-4c51-af18-51cbc9bb0657","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T16:59:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f81607b9-1a85-47ff-8c25-54a5f95a86ee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:56324","PortSpecifier":{"PortValue":56324}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f81607b9-1a85-47ff-8c25-54a5f95a86ee","method":"GET","path":"/maas-api/v1/api-keys/644ae703-bf54-4e84-aeaa-5dcb6323e192","host":"e2e-shared-b-cc457c.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T16:59:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f81607b9-1a85-47ff-8c25-54a5f95a86ee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:56324","PortSpecifier":{"PortValue":56324}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783875569,"nanos":703136564},"http":{"id":"f81607b9-1a85-47ff-8c25-54a5f95a86ee","method":"GET","headers":{":authority":"e2e-shared-b-cc457c.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/644ae703-bf54-4e84-aeaa-5dcb6323e192",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T16:59:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f81607b9-1a85-47ff-8c25-54a5f95a86ee","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-12T16:59:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f81607b9-1a85-47ff-8c25-54a5f95a86ee","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3a471a63-af50-485e-8497-6203c5d354e5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=dd8475e3-e7a1-48e6-b180-67063e5b71ec"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bbc8f098c53"]}}
{"level":"debug","ts":"2026-07-12T16:59:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f81607b9-1a85-47ff-8c25-54a5f95a86ee","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bbc8f098c53"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=dd8475e3-e7a1-48e6-b180-67063e5b71ec"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3a471a63-af50-485e-8497-6203c5d354e5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0ad62af8d9ee34a2581185c374677188874f92016ead4bf32729c9fc9917fab3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-cc457c.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/644ae703-bf54-4e84-aeaa-5dcb6323e192",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T16:59:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f81607b9-1a85-47ff-8c25-54a5f95a86ee","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T16:59:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f81607b9-1a85-47ff-8c25-54a5f95a86ee","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T16:59:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f81607b9-1a85-47ff-8c25-54a5f95a86ee","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-cc457c/auth-test-model-cc457c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T16:59:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f81607b9-1a85-47ff-8c25-54a5f95a86ee","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-12T16:59:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f81607b9-1a85-47ff-8c25-54a5f95a86ee","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T16:59:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f81607b9-1a85-47ff-8c25-54a5f95a86ee","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-12T16:59:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f81607b9-1a85-47ff-8c25-54a5f95a86ee","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T16:59:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f81607b9-1a85-47ff-8c25-54a5f95a86ee","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T16:59:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d32216c-5227-4fbe-8206-1d5ebadcfb37","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39072","PortSpecifier":{"PortValue":39072}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8d32216c-5227-4fbe-8206-1d5ebadcfb37","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-17d27e.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T16:59:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d32216c-5227-4fbe-8206-1d5ebadcfb37","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39072","PortSpecifier":{"PortValue":39072}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783875588,"nanos":946638215},"http":{"id":"8d32216c-5227-4fbe-8206-1d5ebadcfb37","method":"POST","headers":{":authority":"e2e-shared-a-17d27e.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T16:59:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8d32216c-5227-4fbe-8206-1d5ebadcfb37","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-12T16:59:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8d32216c-5227-4fbe-8206-1d5ebadcfb37","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3a471a63-af50-485e-8497-6203c5d354e5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=dd8475e3-e7a1-48e6-b180-67063e5b71ec"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bbc8f098c53"]}}
{"level":"debug","ts":"2026-07-12T16:59:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8d32216c-5227-4fbe-8206-1d5ebadcfb37","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bbc8f098c53"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=dd8475e3-e7a1-48e6-b180-67063e5b71ec"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3a471a63-af50-485e-8497-6203c5d354e5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1e5a55606479a9452f103cb5fb40857ac0ad805336d83bbdfec7e599c9b3e724"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.31:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-17d27e.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T16:59:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d32216c-5227-4fbe-8206-1d5ebadcfb37","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T16:59:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d32216c-5227-4fbe-8206-1d5ebadcfb37","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T16:59:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d32216c-5227-4fbe-8206-1d5ebadcfb37","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-17d27e/auth-test-model-17d27e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T16:59:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8d32216c-5227-4fbe-8206-1d5ebadcfb37","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-12T16:59:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d32216c-5227-4fbe-8206-1d5ebadcfb37","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T16:59:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d32216c-5227-4fbe-8206-1d5ebadcfb37","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-12T16:59:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d32216c-5227-4fbe-8206-1d5ebadcfb37","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T16:59:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d32216c-5227-4fbe-8206-1d5ebadcfb37","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T16:59:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"50340e1e-60cc-4f53-a312-730447a8de28","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:42576","PortSpecifier":{"PortValue":42576}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"50340e1e-60cc-4f53-a312-730447a8de28","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-cc457c.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T16:59:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"50340e1e-60cc-4f53-a312-730447a8de28","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:42576","PortSpecifier":{"PortValue":42576}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783875589,"nanos":733753},"http":{"id":"50340e1e-60cc-4f53-a312-730447a8de28","method":"POST","headers":{":authority":"e2e-shared-b-cc457c.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T16:59:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"50340e1e-60cc-4f53-a312-730447a8de28","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-12T16:59:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"50340e1e-60cc-4f53-a312-730447a8de28","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3a471a63-af50-485e-8497-6203c5d354e5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=dd8475e3-e7a1-48e6-b180-67063e5b71ec"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bbc8f098c53"]}}
{"level":"debug","ts":"2026-07-12T16:59:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"50340e1e-60cc-4f53-a312-730447a8de28","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bbc8f098c53"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=dd8475e3-e7a1-48e6-b180-67063e5b71ec"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3a471a63-af50-485e-8497-6203c5d354e5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0ad62af8d9ee34a2581185c374677188874f92016ead4bf32729c9fc9917fab3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-cc457c.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T16:59:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50340e1e-60cc-4f53-a312-730447a8de28","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T16:59:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50340e1e-60cc-4f53-a312-730447a8de28","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T16:59:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50340e1e-60cc-4f53-a312-730447a8de28","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-cc457c/auth-test-model-cc457c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T16:59:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"50340e1e-60cc-4f53-a312-730447a8de28","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-12T16:59:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50340e1e-60cc-4f53-a312-730447a8de28","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T16:59:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50340e1e-60cc-4f53-a312-730447a8de28","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-12T16:59:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"50340e1e-60cc-4f53-a312-730447a8de28","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T16:59:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"50340e1e-60cc-4f53-a312-730447a8de28","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T16:59:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"66eb10da-0b5c-4b86-955e-3ba9a4b8b270","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39088","PortSpecifier":{"PortValue":39088}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"66eb10da-0b5c-4b86-955e-3ba9a4b8b270","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-17d27e.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T16:59:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"66eb10da-0b5c-4b86-955e-3ba9a4b8b270","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39088","PortSpecifier":{"PortValue":39088}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783875589,"nanos":34530273},"http":{"id":"66eb10da-0b5c-4b86-955e-3ba9a4b8b270","method":"GET","headers":{":authority":"e2e-shared-a-17d27e.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T16:59:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"66eb10da-0b5c-4b86-955e-3ba9a4b8b270","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-r2C3Mlo7onBwEkmG_pcUCuNaKwR8d6QVkjCWvdkZwhTvDZAGWm8PuQEphEaT"}
{"level":"debug","ts":"2026-07-12T16:59:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"66eb10da-0b5c-4b86-955e-3ba9a4b8b270","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-17d27e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-r2C3Mlo7onBwEkmG_pcUCuNaKwR8d6QVkjCWvdkZwhTvDZAGWm8PuQEphEaT\"}"}
{"level":"debug","ts":"2026-07-12T16:59:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"66eb10da-0b5c-4b86-955e-3ba9a4b8b270","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-17d27e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7678cfd4-1639-42d2-977a-5c9be059b21b","keyName":"e2e-auth-iso-a-8746d8","subscription":"e2e-auth-iso-ad46df","tenant":"e2e-shared-a-17d27e","userId":"7678cfd4-1639-42d2-977a-5c9be059b21b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-12T16:59:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"66eb10da-0b5c-4b86-955e-3ba9a4b8b270","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T16:59:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66eb10da-0b5c-4b86-955e-3ba9a4b8b270","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T16:59:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66eb10da-0b5c-4b86-955e-3ba9a4b8b270","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T16:59:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66eb10da-0b5c-4b86-955e-3ba9a4b8b270","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-17d27e/auth-test-model-17d27e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T16:59:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"66eb10da-0b5c-4b86-955e-3ba9a4b8b270","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T16:59:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"66eb10da-0b5c-4b86-955e-3ba9a4b8b270","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-12T16:59:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"66eb10da-0b5c-4b86-955e-3ba9a4b8b270","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-ad46df"}
{"level":"debug","ts":"2026-07-12T16:59:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"66eb10da-0b5c-4b86-955e-3ba9a4b8b270","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-12T16:59:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"66eb10da-0b5c-4b86-955e-3ba9a4b8b270","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T16:59:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"66eb10da-0b5c-4b86-955e-3ba9a4b8b270","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:00:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"281cbbc8-c87d-46c7-87f7-b8e44d79cd13","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49634","PortSpecifier":{"PortValue":49634}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"281cbbc8-c87d-46c7-87f7-b8e44d79cd13","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-17d27e.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:00:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"281cbbc8-c87d-46c7-87f7-b8e44d79cd13","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49634","PortSpecifier":{"PortValue":49634}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783875608,"nanos":241859830},"http":{"id":"281cbbc8-c87d-46c7-87f7-b8e44d79cd13","method":"POST","headers":{":authority":"e2e-shared-a-17d27e.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:00:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"281cbbc8-c87d-46c7-87f7-b8e44d79cd13","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-12T17:00:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"281cbbc8-c87d-46c7-87f7-b8e44d79cd13","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3a471a63-af50-485e-8497-6203c5d354e5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=dd8475e3-e7a1-48e6-b180-67063e5b71ec"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bbc8f098c53"]}}
{"level":"debug","ts":"2026-07-12T17:00:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"281cbbc8-c87d-46c7-87f7-b8e44d79cd13","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bbc8f098c53"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=dd8475e3-e7a1-48e6-b180-67063e5b71ec"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3a471a63-af50-485e-8497-6203c5d354e5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1e5a55606479a9452f103cb5fb40857ac0ad805336d83bbdfec7e599c9b3e724"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.31:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-17d27e.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:00:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"281cbbc8-c87d-46c7-87f7-b8e44d79cd13","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:00:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"281cbbc8-c87d-46c7-87f7-b8e44d79cd13","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:00:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"281cbbc8-c87d-46c7-87f7-b8e44d79cd13","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-17d27e/auth-test-model-17d27e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:00:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"281cbbc8-c87d-46c7-87f7-b8e44d79cd13","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-12T17:00:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"281cbbc8-c87d-46c7-87f7-b8e44d79cd13","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T17:00:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"281cbbc8-c87d-46c7-87f7-b8e44d79cd13","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-12T17:00:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"281cbbc8-c87d-46c7-87f7-b8e44d79cd13","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:00:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"281cbbc8-c87d-46c7-87f7-b8e44d79cd13","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:00:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"43a9a943-4ddd-45b3-a892-02ea08353c6c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41154","PortSpecifier":{"PortValue":41154}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"43a9a943-4ddd-45b3-a892-02ea08353c6c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-cc457c.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:00:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"43a9a943-4ddd-45b3-a892-02ea08353c6c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41154","PortSpecifier":{"PortValue":41154}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783875608,"nanos":276840765},"http":{"id":"43a9a943-4ddd-45b3-a892-02ea08353c6c","method":"POST","headers":{":authority":"e2e-shared-b-cc457c.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:00:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"43a9a943-4ddd-45b3-a892-02ea08353c6c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-12T17:00:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"43a9a943-4ddd-45b3-a892-02ea08353c6c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3a471a63-af50-485e-8497-6203c5d354e5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=dd8475e3-e7a1-48e6-b180-67063e5b71ec"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bbc8f098c53"]}}
{"level":"debug","ts":"2026-07-12T17:00:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"43a9a943-4ddd-45b3-a892-02ea08353c6c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bbc8f098c53"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=dd8475e3-e7a1-48e6-b180-67063e5b71ec"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3a471a63-af50-485e-8497-6203c5d354e5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0ad62af8d9ee34a2581185c374677188874f92016ead4bf32729c9fc9917fab3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-cc457c.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:00:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43a9a943-4ddd-45b3-a892-02ea08353c6c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:00:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43a9a943-4ddd-45b3-a892-02ea08353c6c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:00:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43a9a943-4ddd-45b3-a892-02ea08353c6c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-cc457c/auth-test-model-cc457c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:00:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"43a9a943-4ddd-45b3-a892-02ea08353c6c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-12T17:00:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43a9a943-4ddd-45b3-a892-02ea08353c6c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T17:00:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43a9a943-4ddd-45b3-a892-02ea08353c6c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-12T17:00:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"43a9a943-4ddd-45b3-a892-02ea08353c6c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:00:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"43a9a943-4ddd-45b3-a892-02ea08353c6c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:00:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ca687c5-55e3-479b-8229-3f66965ba0dc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41158","PortSpecifier":{"PortValue":41158}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8ca687c5-55e3-479b-8229-3f66965ba0dc","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-cc457c.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:00:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ca687c5-55e3-479b-8229-3f66965ba0dc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41158","PortSpecifier":{"PortValue":41158}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783875608,"nanos":316618072},"http":{"id":"8ca687c5-55e3-479b-8229-3f66965ba0dc","method":"GET","headers":{":authority":"e2e-shared-b-cc457c.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:00:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8ca687c5-55e3-479b-8229-3f66965ba0dc","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-97HCPqPWcJoR7Edh_Hu2LStVwQFg0iTV5GkiRCAjnTQLSdECH5Skv0ZdTCCR"}
{"level":"debug","ts":"2026-07-12T17:00:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8ca687c5-55e3-479b-8229-3f66965ba0dc","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-cc457c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-97HCPqPWcJoR7Edh_Hu2LStVwQFg0iTV5GkiRCAjnTQLSdECH5Skv0ZdTCCR\"}"}
{"level":"debug","ts":"2026-07-12T17:00:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8ca687c5-55e3-479b-8229-3f66965ba0dc","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-cc457c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-12T17:00:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8ca687c5-55e3-479b-8229-3f66965ba0dc","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"0ad62af8d9ee34a2581185c374677188874f92016ead4bf32729c9fc9917fab3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-cc457c.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:00:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ca687c5-55e3-479b-8229-3f66965ba0dc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:00:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"8ca687c5-55e3-479b-8229-3f66965ba0dc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-12T17:00:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ca687c5-55e3-479b-8229-3f66965ba0dc","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-12T17:00:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ca687c5-55e3-479b-8229-3f66965ba0dc","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-12T17:00:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7cf2e388-35ac-447d-bc39-8f4649f882c5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59262","PortSpecifier":{"PortValue":59262}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7cf2e388-35ac-447d-bc39-8f4649f882c5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-17d27e.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:00:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7cf2e388-35ac-447d-bc39-8f4649f882c5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59262","PortSpecifier":{"PortValue":59262}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783875625,"nanos":438893430},"http":{"id":"7cf2e388-35ac-447d-bc39-8f4649f882c5","method":"POST","headers":{":authority":"e2e-shared-a-17d27e.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:00:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7cf2e388-35ac-447d-bc39-8f4649f882c5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-12T17:00:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7cf2e388-35ac-447d-bc39-8f4649f882c5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3a471a63-af50-485e-8497-6203c5d354e5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=dd8475e3-e7a1-48e6-b180-67063e5b71ec"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bbc8f098c53"]}}
{"level":"debug","ts":"2026-07-12T17:00:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7cf2e388-35ac-447d-bc39-8f4649f882c5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bbc8f098c53"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=dd8475e3-e7a1-48e6-b180-67063e5b71ec"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3a471a63-af50-485e-8497-6203c5d354e5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1e5a55606479a9452f103cb5fb40857ac0ad805336d83bbdfec7e599c9b3e724"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.31:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-17d27e.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:00:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7cf2e388-35ac-447d-bc39-8f4649f882c5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:00:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7cf2e388-35ac-447d-bc39-8f4649f882c5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:00:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7cf2e388-35ac-447d-bc39-8f4649f882c5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-17d27e/auth-test-model-17d27e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:00:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7cf2e388-35ac-447d-bc39-8f4649f882c5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-12T17:00:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7cf2e388-35ac-447d-bc39-8f4649f882c5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T17:00:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7cf2e388-35ac-447d-bc39-8f4649f882c5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-12T17:00:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7cf2e388-35ac-447d-bc39-8f4649f882c5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:00:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7cf2e388-35ac-447d-bc39-8f4649f882c5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:00:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eeaa87d0-38b6-403b-b61a-a476df07eb7a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40718","PortSpecifier":{"PortValue":40718}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"eeaa87d0-38b6-403b-b61a-a476df07eb7a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-cc457c.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:00:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eeaa87d0-38b6-403b-b61a-a476df07eb7a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40718","PortSpecifier":{"PortValue":40718}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783875625,"nanos":484454211},"http":{"id":"eeaa87d0-38b6-403b-b61a-a476df07eb7a","method":"POST","headers":{":authority":"e2e-shared-b-cc457c.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:00:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"eeaa87d0-38b6-403b-b61a-a476df07eb7a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-12T17:00:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"eeaa87d0-38b6-403b-b61a-a476df07eb7a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3a471a63-af50-485e-8497-6203c5d354e5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=dd8475e3-e7a1-48e6-b180-67063e5b71ec"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bbc8f098c53"]}}
{"level":"debug","ts":"2026-07-12T17:00:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"eeaa87d0-38b6-403b-b61a-a476df07eb7a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bbc8f098c53"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=dd8475e3-e7a1-48e6-b180-67063e5b71ec"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3a471a63-af50-485e-8497-6203c5d354e5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0ad62af8d9ee34a2581185c374677188874f92016ead4bf32729c9fc9917fab3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-cc457c.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:00:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eeaa87d0-38b6-403b-b61a-a476df07eb7a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:00:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eeaa87d0-38b6-403b-b61a-a476df07eb7a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:00:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eeaa87d0-38b6-403b-b61a-a476df07eb7a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-cc457c/auth-test-model-cc457c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:00:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"eeaa87d0-38b6-403b-b61a-a476df07eb7a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-12T17:00:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eeaa87d0-38b6-403b-b61a-a476df07eb7a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T17:00:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eeaa87d0-38b6-403b-b61a-a476df07eb7a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-12T17:00:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eeaa87d0-38b6-403b-b61a-a476df07eb7a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:00:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eeaa87d0-38b6-403b-b61a-a476df07eb7a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:00:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ba045e9d-603d-4519-ba97-f3f027c82116","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59270","PortSpecifier":{"PortValue":59270}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ba045e9d-603d-4519-ba97-f3f027c82116","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-17d27e.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:00:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ba045e9d-603d-4519-ba97-f3f027c82116","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59270","PortSpecifier":{"PortValue":59270}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783875625,"nanos":527971569},"http":{"id":"ba045e9d-603d-4519-ba97-f3f027c82116","method":"POST","headers":{":authority":"e2e-shared-a-17d27e.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:00:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ba045e9d-603d-4519-ba97-f3f027c82116","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-12T17:00:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ba045e9d-603d-4519-ba97-f3f027c82116","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3a471a63-af50-485e-8497-6203c5d354e5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=dd8475e3-e7a1-48e6-b180-67063e5b71ec"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bbc8f098c53"]}}
{"level":"debug","ts":"2026-07-12T17:00:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ba045e9d-603d-4519-ba97-f3f027c82116","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bbc8f098c53"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=dd8475e3-e7a1-48e6-b180-67063e5b71ec"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3a471a63-af50-485e-8497-6203c5d354e5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1e5a55606479a9452f103cb5fb40857ac0ad805336d83bbdfec7e599c9b3e724"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.31:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-17d27e.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:00:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba045e9d-603d-4519-ba97-f3f027c82116","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:00:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba045e9d-603d-4519-ba97-f3f027c82116","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:00:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba045e9d-603d-4519-ba97-f3f027c82116","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-17d27e/auth-test-model-17d27e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:00:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ba045e9d-603d-4519-ba97-f3f027c82116","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-12T17:00:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ba045e9d-603d-4519-ba97-f3f027c82116","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T17:00:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ba045e9d-603d-4519-ba97-f3f027c82116","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-12T17:00:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ba045e9d-603d-4519-ba97-f3f027c82116","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:00:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ba045e9d-603d-4519-ba97-f3f027c82116","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:00:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"28df5ad0-22b9-4eb4-ae84-20cad7ab3085","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40720","PortSpecifier":{"PortValue":40720}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"28df5ad0-22b9-4eb4-ae84-20cad7ab3085","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-cc457c.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:00:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"28df5ad0-22b9-4eb4-ae84-20cad7ab3085","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40720","PortSpecifier":{"PortValue":40720}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783875625,"nanos":567738910},"http":{"id":"28df5ad0-22b9-4eb4-ae84-20cad7ab3085","method":"POST","headers":{":authority":"e2e-shared-b-cc457c.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:00:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"28df5ad0-22b9-4eb4-ae84-20cad7ab3085","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-12T17:00:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"28df5ad0-22b9-4eb4-ae84-20cad7ab3085","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3a471a63-af50-485e-8497-6203c5d354e5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=dd8475e3-e7a1-48e6-b180-67063e5b71ec"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bbc8f098c53"]}}
{"level":"debug","ts":"2026-07-12T17:00:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"28df5ad0-22b9-4eb4-ae84-20cad7ab3085","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bbc8f098c53"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=dd8475e3-e7a1-48e6-b180-67063e5b71ec"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3a471a63-af50-485e-8497-6203c5d354e5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0ad62af8d9ee34a2581185c374677188874f92016ead4bf32729c9fc9917fab3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-cc457c.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:00:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28df5ad0-22b9-4eb4-ae84-20cad7ab3085","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:00:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28df5ad0-22b9-4eb4-ae84-20cad7ab3085","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:00:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28df5ad0-22b9-4eb4-ae84-20cad7ab3085","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-cc457c/auth-test-model-cc457c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:00:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"28df5ad0-22b9-4eb4-ae84-20cad7ab3085","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-12T17:00:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28df5ad0-22b9-4eb4-ae84-20cad7ab3085","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T17:00:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28df5ad0-22b9-4eb4-ae84-20cad7ab3085","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-12T17:00:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"28df5ad0-22b9-4eb4-ae84-20cad7ab3085","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:00:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"28df5ad0-22b9-4eb4-ae84-20cad7ab3085","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:00:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"45f8ee40-0bf0-4c63-9376-cfd9536dab52","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35058","PortSpecifier":{"PortValue":35058}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"45f8ee40-0bf0-4c63-9376-cfd9536dab52","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-17d27e.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:00:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"45f8ee40-0bf0-4c63-9376-cfd9536dab52","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35058","PortSpecifier":{"PortValue":35058}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783875640,"nanos":575086008},"http":{"id":"45f8ee40-0bf0-4c63-9376-cfd9536dab52","method":"POST","headers":{":authority":"e2e-shared-a-17d27e.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:00:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"45f8ee40-0bf0-4c63-9376-cfd9536dab52","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-12T17:00:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"45f8ee40-0bf0-4c63-9376-cfd9536dab52","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3a471a63-af50-485e-8497-6203c5d354e5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=dd8475e3-e7a1-48e6-b180-67063e5b71ec"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bbc8f098c53"]}}
{"level":"debug","ts":"2026-07-12T17:00:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"45f8ee40-0bf0-4c63-9376-cfd9536dab52","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bbc8f098c53"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=dd8475e3-e7a1-48e6-b180-67063e5b71ec"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3a471a63-af50-485e-8497-6203c5d354e5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1e5a55606479a9452f103cb5fb40857ac0ad805336d83bbdfec7e599c9b3e724"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.31:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-17d27e.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:00:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"45f8ee40-0bf0-4c63-9376-cfd9536dab52","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:00:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"45f8ee40-0bf0-4c63-9376-cfd9536dab52","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:00:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"45f8ee40-0bf0-4c63-9376-cfd9536dab52","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-17d27e/auth-test-model-17d27e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:00:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"45f8ee40-0bf0-4c63-9376-cfd9536dab52","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-12T17:00:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"45f8ee40-0bf0-4c63-9376-cfd9536dab52","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T17:00:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"45f8ee40-0bf0-4c63-9376-cfd9536dab52","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-12T17:00:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"45f8ee40-0bf0-4c63-9376-cfd9536dab52","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:00:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"45f8ee40-0bf0-4c63-9376-cfd9536dab52","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:00:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"15b708c3-3564-4897-966c-26c9b3b91aa1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34944","PortSpecifier":{"PortValue":34944}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"15b708c3-3564-4897-966c-26c9b3b91aa1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-cc457c.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:00:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"15b708c3-3564-4897-966c-26c9b3b91aa1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34944","PortSpecifier":{"PortValue":34944}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783875640,"nanos":620828727},"http":{"id":"15b708c3-3564-4897-966c-26c9b3b91aa1","method":"POST","headers":{":authority":"e2e-shared-b-cc457c.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:00:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"15b708c3-3564-4897-966c-26c9b3b91aa1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-12T17:00:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"15b708c3-3564-4897-966c-26c9b3b91aa1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3a471a63-af50-485e-8497-6203c5d354e5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=dd8475e3-e7a1-48e6-b180-67063e5b71ec"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bbc8f098c53"]}}
{"level":"debug","ts":"2026-07-12T17:00:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"15b708c3-3564-4897-966c-26c9b3b91aa1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bbc8f098c53"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=dd8475e3-e7a1-48e6-b180-67063e5b71ec"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3a471a63-af50-485e-8497-6203c5d354e5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0ad62af8d9ee34a2581185c374677188874f92016ead4bf32729c9fc9917fab3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-cc457c.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:00:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15b708c3-3564-4897-966c-26c9b3b91aa1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:00:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15b708c3-3564-4897-966c-26c9b3b91aa1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:00:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15b708c3-3564-4897-966c-26c9b3b91aa1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-cc457c/auth-test-model-cc457c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:00:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"15b708c3-3564-4897-966c-26c9b3b91aa1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-12T17:00:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15b708c3-3564-4897-966c-26c9b3b91aa1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-12T17:00:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15b708c3-3564-4897-966c-26c9b3b91aa1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-12T17:00:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"15b708c3-3564-4897-966c-26c9b3b91aa1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:00:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"15b708c3-3564-4897-966c-26c9b3b91aa1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:00:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"04c52ec0-96e9-4f74-bb3f-c6e8f19902ae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34958","PortSpecifier":{"PortValue":34958}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"04c52ec0-96e9-4f74-bb3f-c6e8f19902ae","method":"GET","path":"/maas-api/v1/api-keys/664fd023-340e-45bd-a6a3-4bda61a35842","host":"e2e-shared-b-cc457c.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:00:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"04c52ec0-96e9-4f74-bb3f-c6e8f19902ae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34958","PortSpecifier":{"PortValue":34958}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783875640,"nanos":669502780},"http":{"id":"04c52ec0-96e9-4f74-bb3f-c6e8f19902ae","method":"GET","headers":{":authority":"e2e-shared-b-cc457c.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/664fd023-340e-45bd-a6a3-4bda61a35842",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:00:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"04c52ec0-96e9-4f74-bb3f-c6e8f19902ae","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-12T17:00:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"04c52ec0-96e9-4f74-bb3f-c6e8f19902ae","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3a471a63-af50-485e-8497-6203c5d354e5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=dd8475e3-e7a1-48e6-b180-67063e5b71ec"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bbc8f098c53"]}}
{"level":"debug","ts":"2026-07-12T17:00:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"04c52ec0-96e9-4f74-bb3f-c6e8f19902ae","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bbc8f098c53"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=dd8475e3-e7a1-48e6-b180-67063e5b71ec"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3a471a63-af50-485e-8497-6203c5d354e5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0ad62af8d9ee34a2581185c374677188874f92016ead4bf32729c9fc9917fab3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-cc457c.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/664fd023-340e-45bd-a6a3-4bda61a35842",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:00:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04c52ec0-96e9-4f74-bb3f-c6e8f19902ae","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:00:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04c52ec0-96e9-4f74-bb3f-c6e8f19902ae","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:00:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04c52ec0-96e9-4f74-bb3f-c6e8f19902ae","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-cc457c/auth-test-model-cc457c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:00:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"04c52ec0-96e9-4f74-bb3f-c6e8f19902ae","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-12T17:00:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04c52ec0-96e9-4f74-bb3f-c6e8f19902ae","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T17:00:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04c52ec0-96e9-4f74-bb3f-c6e8f19902ae","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-12T17:00:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"04c52ec0-96e9-4f74-bb3f-c6e8f19902ae","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:00:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"04c52ec0-96e9-4f74-bb3f-c6e8f19902ae","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:00:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3e8f50d2-cbd7-4f67-b5fa-22e95824955b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35074","PortSpecifier":{"PortValue":35074}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3e8f50d2-cbd7-4f67-b5fa-22e95824955b","method":"GET","path":"/maas-api/v1/api-keys/664fd023-340e-45bd-a6a3-4bda61a35842","host":"e2e-shared-a-17d27e.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:00:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3e8f50d2-cbd7-4f67-b5fa-22e95824955b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35074","PortSpecifier":{"PortValue":35074}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783875640,"nanos":724666806},"http":{"id":"3e8f50d2-cbd7-4f67-b5fa-22e95824955b","method":"GET","headers":{":authority":"e2e-shared-a-17d27e.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/664fd023-340e-45bd-a6a3-4bda61a35842",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:00:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3e8f50d2-cbd7-4f67-b5fa-22e95824955b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-12T17:00:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3e8f50d2-cbd7-4f67-b5fa-22e95824955b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3a471a63-af50-485e-8497-6203c5d354e5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=dd8475e3-e7a1-48e6-b180-67063e5b71ec"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bbc8f098c53"]}}
{"level":"debug","ts":"2026-07-12T17:00:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3e8f50d2-cbd7-4f67-b5fa-22e95824955b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bbc8f098c53"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=dd8475e3-e7a1-48e6-b180-67063e5b71ec"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3a471a63-af50-485e-8497-6203c5d354e5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1e5a55606479a9452f103cb5fb40857ac0ad805336d83bbdfec7e599c9b3e724"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.31:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-17d27e.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/664fd023-340e-45bd-a6a3-4bda61a35842",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:00:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e8f50d2-cbd7-4f67-b5fa-22e95824955b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:00:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e8f50d2-cbd7-4f67-b5fa-22e95824955b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:00:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e8f50d2-cbd7-4f67-b5fa-22e95824955b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-17d27e/auth-test-model-17d27e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:00:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3e8f50d2-cbd7-4f67-b5fa-22e95824955b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-12T17:00:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3e8f50d2-cbd7-4f67-b5fa-22e95824955b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T17:00:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3e8f50d2-cbd7-4f67-b5fa-22e95824955b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-12T17:00:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3e8f50d2-cbd7-4f67-b5fa-22e95824955b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:00:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3e8f50d2-cbd7-4f67-b5fa-22e95824955b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:00:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7486cf3b-888f-4605-a07b-1f55553ecb28","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45998","PortSpecifier":{"PortValue":45998}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7486cf3b-888f-4605-a07b-1f55553ecb28","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-17d27e.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:00:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7486cf3b-888f-4605-a07b-1f55553ecb28","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45998","PortSpecifier":{"PortValue":45998}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783875657,"nanos":839086518},"http":{"id":"7486cf3b-888f-4605-a07b-1f55553ecb28","method":"POST","headers":{":authority":"e2e-shared-a-17d27e.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:00:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7486cf3b-888f-4605-a07b-1f55553ecb28","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-12T17:00:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7486cf3b-888f-4605-a07b-1f55553ecb28","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3a471a63-af50-485e-8497-6203c5d354e5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=dd8475e3-e7a1-48e6-b180-67063e5b71ec"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bbc8f098c53"]}}
{"level":"debug","ts":"2026-07-12T17:00:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7486cf3b-888f-4605-a07b-1f55553ecb28","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bbc8f098c53"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=dd8475e3-e7a1-48e6-b180-67063e5b71ec"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3a471a63-af50-485e-8497-6203c5d354e5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1e5a55606479a9452f103cb5fb40857ac0ad805336d83bbdfec7e599c9b3e724"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.31:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-17d27e.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:00:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7486cf3b-888f-4605-a07b-1f55553ecb28","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:00:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7486cf3b-888f-4605-a07b-1f55553ecb28","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:00:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7486cf3b-888f-4605-a07b-1f55553ecb28","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-17d27e/auth-test-model-17d27e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:00:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7486cf3b-888f-4605-a07b-1f55553ecb28","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-12T17:00:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7486cf3b-888f-4605-a07b-1f55553ecb28","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T17:00:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7486cf3b-888f-4605-a07b-1f55553ecb28","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-12T17:00:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7486cf3b-888f-4605-a07b-1f55553ecb28","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:00:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7486cf3b-888f-4605-a07b-1f55553ecb28","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:00:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d005ef91-050b-47d7-9f15-49a505411d52","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50796","PortSpecifier":{"PortValue":50796}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d005ef91-050b-47d7-9f15-49a505411d52","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-cc457c.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:00:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d005ef91-050b-47d7-9f15-49a505411d52","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50796","PortSpecifier":{"PortValue":50796}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783875657,"nanos":874569755},"http":{"id":"d005ef91-050b-47d7-9f15-49a505411d52","method":"POST","headers":{":authority":"e2e-shared-b-cc457c.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:00:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d005ef91-050b-47d7-9f15-49a505411d52","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-12T17:00:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d005ef91-050b-47d7-9f15-49a505411d52","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3a471a63-af50-485e-8497-6203c5d354e5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=dd8475e3-e7a1-48e6-b180-67063e5b71ec"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bbc8f098c53"]}}
{"level":"debug","ts":"2026-07-12T17:00:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d005ef91-050b-47d7-9f15-49a505411d52","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bbc8f098c53"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=dd8475e3-e7a1-48e6-b180-67063e5b71ec"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3a471a63-af50-485e-8497-6203c5d354e5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0ad62af8d9ee34a2581185c374677188874f92016ead4bf32729c9fc9917fab3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-cc457c.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:00:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d005ef91-050b-47d7-9f15-49a505411d52","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:00:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d005ef91-050b-47d7-9f15-49a505411d52","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:00:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d005ef91-050b-47d7-9f15-49a505411d52","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-cc457c/auth-test-model-cc457c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:00:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d005ef91-050b-47d7-9f15-49a505411d52","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-12T17:00:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d005ef91-050b-47d7-9f15-49a505411d52","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-12T17:00:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d005ef91-050b-47d7-9f15-49a505411d52","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-12T17:00:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d005ef91-050b-47d7-9f15-49a505411d52","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:00:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d005ef91-050b-47d7-9f15-49a505411d52","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:00:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"675e541e-8dd4-4ffa-80f9-fe283c830ee2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46014","PortSpecifier":{"PortValue":46014}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"675e541e-8dd4-4ffa-80f9-fe283c830ee2","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-17d27e.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:00:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"675e541e-8dd4-4ffa-80f9-fe283c830ee2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46014","PortSpecifier":{"PortValue":46014}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783875657,"nanos":915503227},"http":{"id":"675e541e-8dd4-4ffa-80f9-fe283c830ee2","method":"POST","headers":{":authority":"e2e-shared-a-17d27e.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:00:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"675e541e-8dd4-4ffa-80f9-fe283c830ee2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-54m9n8Pk5GGufJgZ_2uKnOmH7a9i3nFaGTsHALfGR0VEA1LKYY6avlPi0p8y"}
{"level":"debug","ts":"2026-07-12T17:00:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"675e541e-8dd4-4ffa-80f9-fe283c830ee2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-17d27e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-54m9n8Pk5GGufJgZ_2uKnOmH7a9i3nFaGTsHALfGR0VEA1LKYY6avlPi0p8y\"}"}
{"level":"debug","ts":"2026-07-12T17:00:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"675e541e-8dd4-4ffa-80f9-fe283c830ee2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-17d27e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c8538cf5-9fa6-43a1-bb2c-98a23e921f7e","keyName":"e2e-auth-iso-a-49cc51","subscription":"e2e-auth-iso-094940","tenant":"e2e-shared-a-17d27e","userId":"c8538cf5-9fa6-43a1-bb2c-98a23e921f7e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-12T17:00:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"675e541e-8dd4-4ffa-80f9-fe283c830ee2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:00:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"675e541e-8dd4-4ffa-80f9-fe283c830ee2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:00:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"675e541e-8dd4-4ffa-80f9-fe283c830ee2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:00:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"675e541e-8dd4-4ffa-80f9-fe283c830ee2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-17d27e/auth-test-model-17d27e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:00:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"675e541e-8dd4-4ffa-80f9-fe283c830ee2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T17:00:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"675e541e-8dd4-4ffa-80f9-fe283c830ee2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-12T17:00:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"675e541e-8dd4-4ffa-80f9-fe283c830ee2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-12T17:00:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"675e541e-8dd4-4ffa-80f9-fe283c830ee2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-094940"}
{"level":"info","ts":"2026-07-12T17:00:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"675e541e-8dd4-4ffa-80f9-fe283c830ee2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:00:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"675e541e-8dd4-4ffa-80f9-fe283c830ee2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:01:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/865be8185cd42264dee5f368a1045cb11008c975bb5a45e1be84c3f884cd405a"}
{"level":"info","ts":"2026-07-12T17:01:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/edfecddf12d8d2162a7f59cfc67ff60ba4ea250f450928af6f0c09b694cc2119"}
{"level":"info","ts":"2026-07-12T17:01:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0e258f419871630441b0ea59b862ed82f1a1dd3ec3a6f48eafabd3f21b663760"}
{"level":"info","ts":"2026-07-12T17:01:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9a63c2f1734ee1ad7069cec3400057c03a5dd359bd5bee2747d48b190443e2f6"}
{"level":"info","ts":"2026-07-12T17:01:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cde725f804d58a7e7859b0c4b3a9348bdf4b81e2f40411a393dba54693dea98e"}
{"level":"info","ts":"2026-07-12T17:01:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a38cada856ff3334aeaccc4ae539897c9800a3d2a9e8d621372e75b3d629db76"}
{"level":"info","ts":"2026-07-12T17:01:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ef3f928a695ac44b935906b3a78183c93fd5f3698fd43b59e2a722012ab3523b"}
{"level":"info","ts":"2026-07-12T17:01:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/777cc04c241c73a4ed11c50b267ee1622708bd0753cd9a2a0c03fcfab08a15c1"}
{"level":"info","ts":"2026-07-12T17:01:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bf1a80b34a50c0f09df638139f9ea73e1f5ce7c612de59971193560aea3c83d8"}
{"level":"info","ts":"2026-07-12T17:01:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aa1b0561545cd4332bfd8e55bcd16459c72c13189d35de7acee4a5317fc3f51d"}
{"level":"info","ts":"2026-07-12T17:01:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c1e8ec801bc2237719ed329182e18687b8a4532a751ad001d55f0caf1ebb5926"}
{"level":"info","ts":"2026-07-12T17:01:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e348a5d50f312c530ae0ac7a0cd4fb41dd2fd2e540995dcef639ccdf8f6cebdb"}
{"level":"info","ts":"2026-07-12T17:01:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ca7b4781d27d74e022c77b8b172fb0f455b3ab97b8335b42494d62b495d7f2e2"}
{"level":"info","ts":"2026-07-12T17:01:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c447acc764c15c50ea55b715f508352365bfefce86912d187053f8c65fec5737"}
{"level":"info","ts":"2026-07-12T17:01:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e68af9d84c66b97691b189f05d8e11b235576a99696c9f5346b42065fc5e96fe"}
{"level":"info","ts":"2026-07-12T17:01:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/02234b9e5890f949d7b3db924110d3167e34c28db87f5bf932c5786396c96239"}
{"level":"debug","ts":"2026-07-12T17:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89f80746271497fd3f6830a08c68f4e2cfca03b0297731eaa52216ffb0f6c9ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:01:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:01:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89f80746271497fd3f6830a08c68f4e2cfca03b0297731eaa52216ffb0f6c9ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89f80746271497fd3f6830a08c68f4e2cfca03b0297731eaa52216ffb0f6c9ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:01:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:01:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89f80746271497fd3f6830a08c68f4e2cfca03b0297731eaa52216ffb0f6c9ba"}
{"level":"info","ts":"2026-07-12T17:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89f80746271497fd3f6830a08c68f4e2cfca03b0297731eaa52216ffb0f6c9ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89f80746271497fd3f6830a08c68f4e2cfca03b0297731eaa52216ffb0f6c9ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:01:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:01:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-12T17:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"89f80746271497fd3f6830a08c68f4e2cfca03b0297731eaa52216ffb0f6c9ba","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"89f80746271497fd3f6830a08c68f4e2cfca03b0297731eaa52216ffb0f6c9ba\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-12T17:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89f80746271497fd3f6830a08c68f4e2cfca03b0297731eaa52216ffb0f6c9ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89f80746271497fd3f6830a08c68f4e2cfca03b0297731eaa52216ffb0f6c9ba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89f80746271497fd3f6830a08c68f4e2cfca03b0297731eaa52216ffb0f6c9ba"}
{"level":"info","ts":"2026-07-12T17:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89f80746271497fd3f6830a08c68f4e2cfca03b0297731eaa52216ffb0f6c9ba"}
{"level":"debug","ts":"2026-07-12T17:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89f80746271497fd3f6830a08c68f4e2cfca03b0297731eaa52216ffb0f6c9ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:01:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:01:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89f80746271497fd3f6830a08c68f4e2cfca03b0297731eaa52216ffb0f6c9ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89f80746271497fd3f6830a08c68f4e2cfca03b0297731eaa52216ffb0f6c9ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89f80746271497fd3f6830a08c68f4e2cfca03b0297731eaa52216ffb0f6c9ba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89f80746271497fd3f6830a08c68f4e2cfca03b0297731eaa52216ffb0f6c9ba"}
{"level":"debug","ts":"2026-07-12T17:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da072b4ab52b94d3e926219e4f0b16eaec8f51a358b3d7c8d857ae986134030b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:01:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:01:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da072b4ab52b94d3e926219e4f0b16eaec8f51a358b3d7c8d857ae986134030b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da072b4ab52b94d3e926219e4f0b16eaec8f51a358b3d7c8d857ae986134030b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da072b4ab52b94d3e926219e4f0b16eaec8f51a358b3d7c8d857ae986134030b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da072b4ab52b94d3e926219e4f0b16eaec8f51a358b3d7c8d857ae986134030b"}
{"level":"debug","ts":"2026-07-12T17:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da072b4ab52b94d3e926219e4f0b16eaec8f51a358b3d7c8d857ae986134030b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da072b4ab52b94d3e926219e4f0b16eaec8f51a358b3d7c8d857ae986134030b"}
{"level":"debug","ts":"2026-07-12T17:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da072b4ab52b94d3e926219e4f0b16eaec8f51a358b3d7c8d857ae986134030b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:01:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:01:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da072b4ab52b94d3e926219e4f0b16eaec8f51a358b3d7c8d857ae986134030b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da072b4ab52b94d3e926219e4f0b16eaec8f51a358b3d7c8d857ae986134030b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da072b4ab52b94d3e926219e4f0b16eaec8f51a358b3d7c8d857ae986134030b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:01:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:01:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da072b4ab52b94d3e926219e4f0b16eaec8f51a358b3d7c8d857ae986134030b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"340ca319709705ff1515877fe439c68a7ba4f884e92d131d7ddd131939e59b0d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:01:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:01:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da072b4ab52b94d3e926219e4f0b16eaec8f51a358b3d7c8d857ae986134030b"}
{"level":"info","ts":"2026-07-12T17:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"340ca319709705ff1515877fe439c68a7ba4f884e92d131d7ddd131939e59b0d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da072b4ab52b94d3e926219e4f0b16eaec8f51a358b3d7c8d857ae986134030b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:01:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:01:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da072b4ab52b94d3e926219e4f0b16eaec8f51a358b3d7c8d857ae986134030b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da072b4ab52b94d3e926219e4f0b16eaec8f51a358b3d7c8d857ae986134030b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db9d61bbff118cc9651bc07483bb3a3c2245ca8dc6b269a0c3d1ba41caac55ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:01:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:01:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/340ca319709705ff1515877fe439c68a7ba4f884e92d131d7ddd131939e59b0d"}
{"level":"info","ts":"2026-07-12T17:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db9d61bbff118cc9651bc07483bb3a3c2245ca8dc6b269a0c3d1ba41caac55ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"340ca319709705ff1515877fe439c68a7ba4f884e92d131d7ddd131939e59b0d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:01:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:01:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["340ca319709705ff1515877fe439c68a7ba4f884e92d131d7ddd131939e59b0d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db9d61bbff118cc9651bc07483bb3a3c2245ca8dc6b269a0c3d1ba41caac55ce"}
{"level":"info","ts":"2026-07-12T17:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"340ca319709705ff1515877fe439c68a7ba4f884e92d131d7ddd131939e59b0d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da072b4ab52b94d3e926219e4f0b16eaec8f51a358b3d7c8d857ae986134030b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:01:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:01:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da072b4ab52b94d3e926219e4f0b16eaec8f51a358b3d7c8d857ae986134030b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db9d61bbff118cc9651bc07483bb3a3c2245ca8dc6b269a0c3d1ba41caac55ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:01:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:01:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db9d61bbff118cc9651bc07483bb3a3c2245ca8dc6b269a0c3d1ba41caac55ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da072b4ab52b94d3e926219e4f0b16eaec8f51a358b3d7c8d857ae986134030b"}
{"level":"info","ts":"2026-07-12T17:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db9d61bbff118cc9651bc07483bb3a3c2245ca8dc6b269a0c3d1ba41caac55ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"340ca319709705ff1515877fe439c68a7ba4f884e92d131d7ddd131939e59b0d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:01:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:01:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"340ca319709705ff1515877fe439c68a7ba4f884e92d131d7ddd131939e59b0d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da072b4ab52b94d3e926219e4f0b16eaec8f51a358b3d7c8d857ae986134030b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:01:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:01:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da072b4ab52b94d3e926219e4f0b16eaec8f51a358b3d7c8d857ae986134030b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/340ca319709705ff1515877fe439c68a7ba4f884e92d131d7ddd131939e59b0d"}
{"level":"info","ts":"2026-07-12T17:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db9d61bbff118cc9651bc07483bb3a3c2245ca8dc6b269a0c3d1ba41caac55ce"}
{"level":"info","ts":"2026-07-12T17:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da072b4ab52b94d3e926219e4f0b16eaec8f51a358b3d7c8d857ae986134030b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db9d61bbff118cc9651bc07483bb3a3c2245ca8dc6b269a0c3d1ba41caac55ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"340ca319709705ff1515877fe439c68a7ba4f884e92d131d7ddd131939e59b0d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:01:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:01:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["340ca319709705ff1515877fe439c68a7ba4f884e92d131d7ddd131939e59b0d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da072b4ab52b94d3e926219e4f0b16eaec8f51a358b3d7c8d857ae986134030b"}
{"level":"info","ts":"2026-07-12T17:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"340ca319709705ff1515877fe439c68a7ba4f884e92d131d7ddd131939e59b0d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2256d98da01e9aaf1f463461911a0370c60e5573abcf53f6c4847bc513e1a88a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:01:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:01:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/340ca319709705ff1515877fe439c68a7ba4f884e92d131d7ddd131939e59b0d"}
{"level":"info","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2256d98da01e9aaf1f463461911a0370c60e5573abcf53f6c4847bc513e1a88a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da072b4ab52b94d3e926219e4f0b16eaec8f51a358b3d7c8d857ae986134030b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"340ca319709705ff1515877fe439c68a7ba4f884e92d131d7ddd131939e59b0d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2256d98da01e9aaf1f463461911a0370c60e5573abcf53f6c4847bc513e1a88a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:01:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:01:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2256d98da01e9aaf1f463461911a0370c60e5573abcf53f6c4847bc513e1a88a"}
{"level":"info","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2256d98da01e9aaf1f463461911a0370c60e5573abcf53f6c4847bc513e1a88a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2256d98da01e9aaf1f463461911a0370c60e5573abcf53f6c4847bc513e1a88a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:01:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:01:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2256d98da01e9aaf1f463461911a0370c60e5573abcf53f6c4847bc513e1a88a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da072b4ab52b94d3e926219e4f0b16eaec8f51a358b3d7c8d857ae986134030b"}
{"level":"error","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2256d98da01e9aaf1f463461911a0370c60e5573abcf53f6c4847bc513e1a88a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2256d98da01e9aaf1f463461911a0370c60e5573abcf53f6c4847bc513e1a88a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1e79fa8766e41a965c0854701cc9042de853fb0d2e557a45d8570914744a075","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:01:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:01:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/340ca319709705ff1515877fe439c68a7ba4f884e92d131d7ddd131939e59b0d"}
{"level":"info","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1e79fa8766e41a965c0854701cc9042de853fb0d2e557a45d8570914744a075","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2256d98da01e9aaf1f463461911a0370c60e5573abcf53f6c4847bc513e1a88a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1e79fa8766e41a965c0854701cc9042de853fb0d2e557a45d8570914744a075","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1e79fa8766e41a965c0854701cc9042de853fb0d2e557a45d8570914744a075","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2256d98da01e9aaf1f463461911a0370c60e5573abcf53f6c4847bc513e1a88a"}
{"level":"debug","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1e79fa8766e41a965c0854701cc9042de853fb0d2e557a45d8570914744a075","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:01:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:01:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1e79fa8766e41a965c0854701cc9042de853fb0d2e557a45d8570914744a075"}
{"level":"info","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1e79fa8766e41a965c0854701cc9042de853fb0d2e557a45d8570914744a075","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2256d98da01e9aaf1f463461911a0370c60e5573abcf53f6c4847bc513e1a88a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:01:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:01:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2256d98da01e9aaf1f463461911a0370c60e5573abcf53f6c4847bc513e1a88a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2256d98da01e9aaf1f463461911a0370c60e5573abcf53f6c4847bc513e1a88a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1e79fa8766e41a965c0854701cc9042de853fb0d2e557a45d8570914744a075","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2256d98da01e9aaf1f463461911a0370c60e5573abcf53f6c4847bc513e1a88a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1e79fa8766e41a965c0854701cc9042de853fb0d2e557a45d8570914744a075"}
{"level":"debug","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1e79fa8766e41a965c0854701cc9042de853fb0d2e557a45d8570914744a075","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:01:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:01:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1e79fa8766e41a965c0854701cc9042de853fb0d2e557a45d8570914744a075"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2256d98da01e9aaf1f463461911a0370c60e5573abcf53f6c4847bc513e1a88a"}
{"level":"info","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1e79fa8766e41a965c0854701cc9042de853fb0d2e557a45d8570914744a075","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1e79fa8766e41a965c0854701cc9042de853fb0d2e557a45d8570914744a075","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1e79fa8766e41a965c0854701cc9042de853fb0d2e557a45d8570914744a075"}
{"level":"debug","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11e3eb4660deb7a7c9f3bf6b1cff0a73368c4a4df78af68960263a5fa0cff2f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:01:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:01:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11e3eb4660deb7a7c9f3bf6b1cff0a73368c4a4df78af68960263a5fa0cff2f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11e3eb4660deb7a7c9f3bf6b1cff0a73368c4a4df78af68960263a5fa0cff2f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11e3eb4660deb7a7c9f3bf6b1cff0a73368c4a4df78af68960263a5fa0cff2f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11e3eb4660deb7a7c9f3bf6b1cff0a73368c4a4df78af68960263a5fa0cff2f9"}
{"level":"debug","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11e3eb4660deb7a7c9f3bf6b1cff0a73368c4a4df78af68960263a5fa0cff2f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11e3eb4660deb7a7c9f3bf6b1cff0a73368c4a4df78af68960263a5fa0cff2f9"}
{"level":"debug","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11e3eb4660deb7a7c9f3bf6b1cff0a73368c4a4df78af68960263a5fa0cff2f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:01:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:01:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11e3eb4660deb7a7c9f3bf6b1cff0a73368c4a4df78af68960263a5fa0cff2f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11e3eb4660deb7a7c9f3bf6b1cff0a73368c4a4df78af68960263a5fa0cff2f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11e3eb4660deb7a7c9f3bf6b1cff0a73368c4a4df78af68960263a5fa0cff2f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:01:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:01:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11e3eb4660deb7a7c9f3bf6b1cff0a73368c4a4df78af68960263a5fa0cff2f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87e8234b0867ada95f1489ee697249881693d9753abef33fd0127d896d2974de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:01:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:01:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11e3eb4660deb7a7c9f3bf6b1cff0a73368c4a4df78af68960263a5fa0cff2f9"}
{"level":"info","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87e8234b0867ada95f1489ee697249881693d9753abef33fd0127d896d2974de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11e3eb4660deb7a7c9f3bf6b1cff0a73368c4a4df78af68960263a5fa0cff2f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:01:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:01:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11e3eb4660deb7a7c9f3bf6b1cff0a73368c4a4df78af68960263a5fa0cff2f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87e8234b0867ada95f1489ee697249881693d9753abef33fd0127d896d2974de"}
{"level":"info","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11e3eb4660deb7a7c9f3bf6b1cff0a73368c4a4df78af68960263a5fa0cff2f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87e8234b0867ada95f1489ee697249881693d9753abef33fd0127d896d2974de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:01:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:01:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["87e8234b0867ada95f1489ee697249881693d9753abef33fd0127d896d2974de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87e8234b0867ada95f1489ee697249881693d9753abef33fd0127d896d2974de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11e3eb4660deb7a7c9f3bf6b1cff0a73368c4a4df78af68960263a5fa0cff2f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:01:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:01:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11e3eb4660deb7a7c9f3bf6b1cff0a73368c4a4df78af68960263a5fa0cff2f9"}
{"level":"info","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11e3eb4660deb7a7c9f3bf6b1cff0a73368c4a4df78af68960263a5fa0cff2f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87e8234b0867ada95f1489ee697249881693d9753abef33fd0127d896d2974de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:01:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:01:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87e8234b0867ada95f1489ee697249881693d9753abef33fd0127d896d2974de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11e3eb4660deb7a7c9f3bf6b1cff0a73368c4a4df78af68960263a5fa0cff2f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:01:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:01:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11e3eb4660deb7a7c9f3bf6b1cff0a73368c4a4df78af68960263a5fa0cff2f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87e8234b0867ada95f1489ee697249881693d9753abef33fd0127d896d2974de"}
{"level":"info","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11e3eb4660deb7a7c9f3bf6b1cff0a73368c4a4df78af68960263a5fa0cff2f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87e8234b0867ada95f1489ee697249881693d9753abef33fd0127d896d2974de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:01:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:01:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["87e8234b0867ada95f1489ee697249881693d9753abef33fd0127d896d2974de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87e8234b0867ada95f1489ee697249881693d9753abef33fd0127d896d2974de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11e3eb4660deb7a7c9f3bf6b1cff0a73368c4a4df78af68960263a5fa0cff2f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:01:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:01:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11e3eb4660deb7a7c9f3bf6b1cff0a73368c4a4df78af68960263a5fa0cff2f9"}
{"level":"info","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11e3eb4660deb7a7c9f3bf6b1cff0a73368c4a4df78af68960263a5fa0cff2f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87e8234b0867ada95f1489ee697249881693d9753abef33fd0127d896d2974de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:01:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:01:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87e8234b0867ada95f1489ee697249881693d9753abef33fd0127d896d2974de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11e3eb4660deb7a7c9f3bf6b1cff0a73368c4a4df78af68960263a5fa0cff2f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:01:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:01:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11e3eb4660deb7a7c9f3bf6b1cff0a73368c4a4df78af68960263a5fa0cff2f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87e8234b0867ada95f1489ee697249881693d9753abef33fd0127d896d2974de"}
{"level":"info","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11e3eb4660deb7a7c9f3bf6b1cff0a73368c4a4df78af68960263a5fa0cff2f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87e8234b0867ada95f1489ee697249881693d9753abef33fd0127d896d2974de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:01:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:01:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["87e8234b0867ada95f1489ee697249881693d9753abef33fd0127d896d2974de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87e8234b0867ada95f1489ee697249881693d9753abef33fd0127d896d2974de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11e3eb4660deb7a7c9f3bf6b1cff0a73368c4a4df78af68960263a5fa0cff2f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:01:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:01:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11e3eb4660deb7a7c9f3bf6b1cff0a73368c4a4df78af68960263a5fa0cff2f9"}
{"level":"info","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11e3eb4660deb7a7c9f3bf6b1cff0a73368c4a4df78af68960263a5fa0cff2f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87e8234b0867ada95f1489ee697249881693d9753abef33fd0127d896d2974de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:01:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:01:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87e8234b0867ada95f1489ee697249881693d9753abef33fd0127d896d2974de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11e3eb4660deb7a7c9f3bf6b1cff0a73368c4a4df78af68960263a5fa0cff2f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:01:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:01:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11e3eb4660deb7a7c9f3bf6b1cff0a73368c4a4df78af68960263a5fa0cff2f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87e8234b0867ada95f1489ee697249881693d9753abef33fd0127d896d2974de"}
{"level":"info","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11e3eb4660deb7a7c9f3bf6b1cff0a73368c4a4df78af68960263a5fa0cff2f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87e8234b0867ada95f1489ee697249881693d9753abef33fd0127d896d2974de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:01:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:01:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["87e8234b0867ada95f1489ee697249881693d9753abef33fd0127d896d2974de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11e3eb4660deb7a7c9f3bf6b1cff0a73368c4a4df78af68960263a5fa0cff2f9"}
{"level":"info","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87e8234b0867ada95f1489ee697249881693d9753abef33fd0127d896d2974de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11e3eb4660deb7a7c9f3bf6b1cff0a73368c4a4df78af68960263a5fa0cff2f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87e8234b0867ada95f1489ee697249881693d9753abef33fd0127d896d2974de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:01:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:01:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87e8234b0867ada95f1489ee697249881693d9753abef33fd0127d896d2974de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87e8234b0867ada95f1489ee697249881693d9753abef33fd0127d896d2974de","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87e8234b0867ada95f1489ee697249881693d9753abef33fd0127d896d2974de"}
{"level":"debug","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87e8234b0867ada95f1489ee697249881693d9753abef33fd0127d896d2974de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:01:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:01:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["87e8234b0867ada95f1489ee697249881693d9753abef33fd0127d896d2974de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87e8234b0867ada95f1489ee697249881693d9753abef33fd0127d896d2974de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87e8234b0867ada95f1489ee697249881693d9753abef33fd0127d896d2974de","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11e3eb4660deb7a7c9f3bf6b1cff0a73368c4a4df78af68960263a5fa0cff2f9"}
{"level":"info","ts":"2026-07-12T17:01:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87e8234b0867ada95f1489ee697249881693d9753abef33fd0127d896d2974de"}
{"level":"debug","ts":"2026-07-12T17:01:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c7710343b678191ba24e6e320fd25f1ee750ab146aa275b9a52a56ddc9693fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:01:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:01:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c7710343b678191ba24e6e320fd25f1ee750ab146aa275b9a52a56ddc9693fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c7710343b678191ba24e6e320fd25f1ee750ab146aa275b9a52a56ddc9693fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c7710343b678191ba24e6e320fd25f1ee750ab146aa275b9a52a56ddc9693fb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:01:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c7710343b678191ba24e6e320fd25f1ee750ab146aa275b9a52a56ddc9693fb"}
{"level":"debug","ts":"2026-07-12T17:01:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c7710343b678191ba24e6e320fd25f1ee750ab146aa275b9a52a56ddc9693fb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:01:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c7710343b678191ba24e6e320fd25f1ee750ab146aa275b9a52a56ddc9693fb"}
{"level":"debug","ts":"2026-07-12T17:01:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c7710343b678191ba24e6e320fd25f1ee750ab146aa275b9a52a56ddc9693fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:01:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:01:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c7710343b678191ba24e6e320fd25f1ee750ab146aa275b9a52a56ddc9693fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c7710343b678191ba24e6e320fd25f1ee750ab146aa275b9a52a56ddc9693fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58b895e8e642d5acfc2c5b4ac474da2e0e53c30456c137e19199cc80cc72decf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:01:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:01:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58b895e8e642d5acfc2c5b4ac474da2e0e53c30456c137e19199cc80cc72decf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c7710343b678191ba24e6e320fd25f1ee750ab146aa275b9a52a56ddc9693fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58b895e8e642d5acfc2c5b4ac474da2e0e53c30456c137e19199cc80cc72decf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:01:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58b895e8e642d5acfc2c5b4ac474da2e0e53c30456c137e19199cc80cc72decf"}
{"level":"debug","ts":"2026-07-12T17:01:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58b895e8e642d5acfc2c5b4ac474da2e0e53c30456c137e19199cc80cc72decf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:01:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:01:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58b895e8e642d5acfc2c5b4ac474da2e0e53c30456c137e19199cc80cc72decf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58b895e8e642d5acfc2c5b4ac474da2e0e53c30456c137e19199cc80cc72decf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58b895e8e642d5acfc2c5b4ac474da2e0e53c30456c137e19199cc80cc72decf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:01:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c7710343b678191ba24e6e320fd25f1ee750ab146aa275b9a52a56ddc9693fb"}
{"level":"info","ts":"2026-07-12T17:01:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58b895e8e642d5acfc2c5b4ac474da2e0e53c30456c137e19199cc80cc72decf"}
{"level":"debug","ts":"2026-07-12T17:01:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3bc455b62d90d7130f7e503adc401d8090bed2b617d910243618e06da463dc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:01:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:01:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3bc455b62d90d7130f7e503adc401d8090bed2b617d910243618e06da463dc8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3bc455b62d90d7130f7e503adc401d8090bed2b617d910243618e06da463dc8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:01:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3bc455b62d90d7130f7e503adc401d8090bed2b617d910243618e06da463dc8"}
{"level":"debug","ts":"2026-07-12T17:01:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3bc455b62d90d7130f7e503adc401d8090bed2b617d910243618e06da463dc8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3bc455b62d90d7130f7e503adc401d8090bed2b617d910243618e06da463dc8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:01:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3bc455b62d90d7130f7e503adc401d8090bed2b617d910243618e06da463dc8"}
{"level":"debug","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3bc455b62d90d7130f7e503adc401d8090bed2b617d910243618e06da463dc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:01:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:01:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3bc455b62d90d7130f7e503adc401d8090bed2b617d910243618e06da463dc8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3bc455b62d90d7130f7e503adc401d8090bed2b617d910243618e06da463dc8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3bc455b62d90d7130f7e503adc401d8090bed2b617d910243618e06da463dc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:01:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:01:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3bc455b62d90d7130f7e503adc401d8090bed2b617d910243618e06da463dc8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3bc455b62d90d7130f7e503adc401d8090bed2b617d910243618e06da463dc8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3bc455b62d90d7130f7e503adc401d8090bed2b617d910243618e06da463dc8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3bc455b62d90d7130f7e503adc401d8090bed2b617d910243618e06da463dc8"}
{"level":"debug","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3bc455b62d90d7130f7e503adc401d8090bed2b617d910243618e06da463dc8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3bc455b62d90d7130f7e503adc401d8090bed2b617d910243618e06da463dc8"}
{"level":"debug","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3bc455b62d90d7130f7e503adc401d8090bed2b617d910243618e06da463dc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:01:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:01:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3bc455b62d90d7130f7e503adc401d8090bed2b617d910243618e06da463dc8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3bc455b62d90d7130f7e503adc401d8090bed2b617d910243618e06da463dc8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3bc455b62d90d7130f7e503adc401d8090bed2b617d910243618e06da463dc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:01:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:01:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3bc455b62d90d7130f7e503adc401d8090bed2b617d910243618e06da463dc8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3bc455b62d90d7130f7e503adc401d8090bed2b617d910243618e06da463dc8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3bc455b62d90d7130f7e503adc401d8090bed2b617d910243618e06da463dc8"}
{"level":"debug","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3bc455b62d90d7130f7e503adc401d8090bed2b617d910243618e06da463dc8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3bc455b62d90d7130f7e503adc401d8090bed2b617d910243618e06da463dc8"}
{"level":"debug","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3bc455b62d90d7130f7e503adc401d8090bed2b617d910243618e06da463dc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:01:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:01:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3bc455b62d90d7130f7e503adc401d8090bed2b617d910243618e06da463dc8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3bc455b62d90d7130f7e503adc401d8090bed2b617d910243618e06da463dc8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3bc455b62d90d7130f7e503adc401d8090bed2b617d910243618e06da463dc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:01:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:01:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3bc455b62d90d7130f7e503adc401d8090bed2b617d910243618e06da463dc8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3bc455b62d90d7130f7e503adc401d8090bed2b617d910243618e06da463dc8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3bc455b62d90d7130f7e503adc401d8090bed2b617d910243618e06da463dc8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3bc455b62d90d7130f7e503adc401d8090bed2b617d910243618e06da463dc8"}
{"level":"debug","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3bc455b62d90d7130f7e503adc401d8090bed2b617d910243618e06da463dc8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3bc455b62d90d7130f7e503adc401d8090bed2b617d910243618e06da463dc8"}
{"level":"debug","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd63aa61be1fba0d3ec50121c2420265a00458272b945bb5d094fe76d0cf2cff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:01:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:01:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd63aa61be1fba0d3ec50121c2420265a00458272b945bb5d094fe76d0cf2cff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd63aa61be1fba0d3ec50121c2420265a00458272b945bb5d094fe76d0cf2cff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:01:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:01:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd63aa61be1fba0d3ec50121c2420265a00458272b945bb5d094fe76d0cf2cff"}
{"level":"info","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd63aa61be1fba0d3ec50121c2420265a00458272b945bb5d094fe76d0cf2cff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd63aa61be1fba0d3ec50121c2420265a00458272b945bb5d094fe76d0cf2cff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:01:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:01:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cd63aa61be1fba0d3ec50121c2420265a00458272b945bb5d094fe76d0cf2cff","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cd63aa61be1fba0d3ec50121c2420265a00458272b945bb5d094fe76d0cf2cff\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3bc455b62d90d7130f7e503adc401d8090bed2b617d910243618e06da463dc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:01:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:01:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3bc455b62d90d7130f7e503adc401d8090bed2b617d910243618e06da463dc8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd63aa61be1fba0d3ec50121c2420265a00458272b945bb5d094fe76d0cf2cff"}
{"level":"info","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3bc455b62d90d7130f7e503adc401d8090bed2b617d910243618e06da463dc8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd63aa61be1fba0d3ec50121c2420265a00458272b945bb5d094fe76d0cf2cff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3bc455b62d90d7130f7e503adc401d8090bed2b617d910243618e06da463dc8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd63aa61be1fba0d3ec50121c2420265a00458272b945bb5d094fe76d0cf2cff"}
{"level":"info","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3bc455b62d90d7130f7e503adc401d8090bed2b617d910243618e06da463dc8"}
{"level":"debug","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd63aa61be1fba0d3ec50121c2420265a00458272b945bb5d094fe76d0cf2cff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:01:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:01:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd63aa61be1fba0d3ec50121c2420265a00458272b945bb5d094fe76d0cf2cff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd63aa61be1fba0d3ec50121c2420265a00458272b945bb5d094fe76d0cf2cff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5548e9b82888f4a43715c4cd0e753e25769d6ba4e8fb3766cfb593f4c18c1ff1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:01:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:01:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5548e9b82888f4a43715c4cd0e753e25769d6ba4e8fb3766cfb593f4c18c1ff1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd63aa61be1fba0d3ec50121c2420265a00458272b945bb5d094fe76d0cf2cff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5548e9b82888f4a43715c4cd0e753e25769d6ba4e8fb3766cfb593f4c18c1ff1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5548e9b82888f4a43715c4cd0e753e25769d6ba4e8fb3766cfb593f4c18c1ff1"}
{"level":"debug","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5548e9b82888f4a43715c4cd0e753e25769d6ba4e8fb3766cfb593f4c18c1ff1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:01:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:01:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5548e9b82888f4a43715c4cd0e753e25769d6ba4e8fb3766cfb593f4c18c1ff1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5548e9b82888f4a43715c4cd0e753e25769d6ba4e8fb3766cfb593f4c18c1ff1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5548e9b82888f4a43715c4cd0e753e25769d6ba4e8fb3766cfb593f4c18c1ff1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd63aa61be1fba0d3ec50121c2420265a00458272b945bb5d094fe76d0cf2cff"}
{"level":"info","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5548e9b82888f4a43715c4cd0e753e25769d6ba4e8fb3766cfb593f4c18c1ff1"}
{"level":"debug","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4067f34a83ab6144d84ae38cc38f751f0f8a322f26996f7192ea06dc31a9d45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:01:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:01:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4067f34a83ab6144d84ae38cc38f751f0f8a322f26996f7192ea06dc31a9d45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4067f34a83ab6144d84ae38cc38f751f0f8a322f26996f7192ea06dc31a9d45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4067f34a83ab6144d84ae38cc38f751f0f8a322f26996f7192ea06dc31a9d45","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4067f34a83ab6144d84ae38cc38f751f0f8a322f26996f7192ea06dc31a9d45"}
{"level":"debug","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4067f34a83ab6144d84ae38cc38f751f0f8a322f26996f7192ea06dc31a9d45","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4067f34a83ab6144d84ae38cc38f751f0f8a322f26996f7192ea06dc31a9d45"}
{"level":"debug","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4067f34a83ab6144d84ae38cc38f751f0f8a322f26996f7192ea06dc31a9d45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:01:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:01:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4067f34a83ab6144d84ae38cc38f751f0f8a322f26996f7192ea06dc31a9d45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4067f34a83ab6144d84ae38cc38f751f0f8a322f26996f7192ea06dc31a9d45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4067f34a83ab6144d84ae38cc38f751f0f8a322f26996f7192ea06dc31a9d45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:01:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:01:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4067f34a83ab6144d84ae38cc38f751f0f8a322f26996f7192ea06dc31a9d45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"184cca99a77fd07d7013e77db311492c46cb47cdadae0e1cd84c568499c26a98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:01:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:01:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4067f34a83ab6144d84ae38cc38f751f0f8a322f26996f7192ea06dc31a9d45"}
{"level":"info","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"184cca99a77fd07d7013e77db311492c46cb47cdadae0e1cd84c568499c26a98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4067f34a83ab6144d84ae38cc38f751f0f8a322f26996f7192ea06dc31a9d45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:01:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:01:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4067f34a83ab6144d84ae38cc38f751f0f8a322f26996f7192ea06dc31a9d45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/184cca99a77fd07d7013e77db311492c46cb47cdadae0e1cd84c568499c26a98"}
{"level":"info","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4067f34a83ab6144d84ae38cc38f751f0f8a322f26996f7192ea06dc31a9d45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"184cca99a77fd07d7013e77db311492c46cb47cdadae0e1cd84c568499c26a98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:01:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:01:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["184cca99a77fd07d7013e77db311492c46cb47cdadae0e1cd84c568499c26a98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"184cca99a77fd07d7013e77db311492c46cb47cdadae0e1cd84c568499c26a98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4067f34a83ab6144d84ae38cc38f751f0f8a322f26996f7192ea06dc31a9d45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:01:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:01:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4067f34a83ab6144d84ae38cc38f751f0f8a322f26996f7192ea06dc31a9d45"}
{"level":"info","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4067f34a83ab6144d84ae38cc38f751f0f8a322f26996f7192ea06dc31a9d45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"184cca99a77fd07d7013e77db311492c46cb47cdadae0e1cd84c568499c26a98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:01:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:01:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"184cca99a77fd07d7013e77db311492c46cb47cdadae0e1cd84c568499c26a98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4067f34a83ab6144d84ae38cc38f751f0f8a322f26996f7192ea06dc31a9d45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:01:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:01:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4067f34a83ab6144d84ae38cc38f751f0f8a322f26996f7192ea06dc31a9d45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/184cca99a77fd07d7013e77db311492c46cb47cdadae0e1cd84c568499c26a98"}
{"level":"info","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4067f34a83ab6144d84ae38cc38f751f0f8a322f26996f7192ea06dc31a9d45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"184cca99a77fd07d7013e77db311492c46cb47cdadae0e1cd84c568499c26a98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:01:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:01:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["184cca99a77fd07d7013e77db311492c46cb47cdadae0e1cd84c568499c26a98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4067f34a83ab6144d84ae38cc38f751f0f8a322f26996f7192ea06dc31a9d45"}
{"level":"info","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"184cca99a77fd07d7013e77db311492c46cb47cdadae0e1cd84c568499c26a98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4067f34a83ab6144d84ae38cc38f751f0f8a322f26996f7192ea06dc31a9d45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e05e44d44b54ac88d19515bc3a509e60debb052f333eac16d1f2da68a1cf096","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:01:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:01:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e05e44d44b54ac88d19515bc3a509e60debb052f333eac16d1f2da68a1cf096","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"184cca99a77fd07d7013e77db311492c46cb47cdadae0e1cd84c568499c26a98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:01:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:01:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/184cca99a77fd07d7013e77db311492c46cb47cdadae0e1cd84c568499c26a98"}
{"level":"info","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"184cca99a77fd07d7013e77db311492c46cb47cdadae0e1cd84c568499c26a98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e05e44d44b54ac88d19515bc3a509e60debb052f333eac16d1f2da68a1cf096","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:01:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:01:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e05e44d44b54ac88d19515bc3a509e60debb052f333eac16d1f2da68a1cf096"}
{"level":"info","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e05e44d44b54ac88d19515bc3a509e60debb052f333eac16d1f2da68a1cf096","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"184cca99a77fd07d7013e77db311492c46cb47cdadae0e1cd84c568499c26a98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:01:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:01:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["184cca99a77fd07d7013e77db311492c46cb47cdadae0e1cd84c568499c26a98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"184cca99a77fd07d7013e77db311492c46cb47cdadae0e1cd84c568499c26a98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e05e44d44b54ac88d19515bc3a509e60debb052f333eac16d1f2da68a1cf096","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:01:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:01:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e05e44d44b54ac88d19515bc3a509e60debb052f333eac16d1f2da68a1cf096"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4067f34a83ab6144d84ae38cc38f751f0f8a322f26996f7192ea06dc31a9d45"}
{"level":"info","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e05e44d44b54ac88d19515bc3a509e60debb052f333eac16d1f2da68a1cf096","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"184cca99a77fd07d7013e77db311492c46cb47cdadae0e1cd84c568499c26a98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:01:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:01:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"184cca99a77fd07d7013e77db311492c46cb47cdadae0e1cd84c568499c26a98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e05e44d44b54ac88d19515bc3a509e60debb052f333eac16d1f2da68a1cf096","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"184cca99a77fd07d7013e77db311492c46cb47cdadae0e1cd84c568499c26a98","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/184cca99a77fd07d7013e77db311492c46cb47cdadae0e1cd84c568499c26a98"}
{"level":"debug","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"184cca99a77fd07d7013e77db311492c46cb47cdadae0e1cd84c568499c26a98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:01:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:01:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["184cca99a77fd07d7013e77db311492c46cb47cdadae0e1cd84c568499c26a98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"184cca99a77fd07d7013e77db311492c46cb47cdadae0e1cd84c568499c26a98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"184cca99a77fd07d7013e77db311492c46cb47cdadae0e1cd84c568499c26a98","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e05e44d44b54ac88d19515bc3a509e60debb052f333eac16d1f2da68a1cf096"}
{"level":"info","ts":"2026-07-12T17:01:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/184cca99a77fd07d7013e77db311492c46cb47cdadae0e1cd84c568499c26a98"}
{"level":"debug","ts":"2026-07-12T17:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db9d61bbff118cc9651bc07483bb3a3c2245ca8dc6b269a0c3d1ba41caac55ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:01:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:01:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db9d61bbff118cc9651bc07483bb3a3c2245ca8dc6b269a0c3d1ba41caac55ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db9d61bbff118cc9651bc07483bb3a3c2245ca8dc6b269a0c3d1ba41caac55ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db9d61bbff118cc9651bc07483bb3a3c2245ca8dc6b269a0c3d1ba41caac55ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db9d61bbff118cc9651bc07483bb3a3c2245ca8dc6b269a0c3d1ba41caac55ce"}
{"level":"debug","ts":"2026-07-12T17:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db9d61bbff118cc9651bc07483bb3a3c2245ca8dc6b269a0c3d1ba41caac55ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db9d61bbff118cc9651bc07483bb3a3c2245ca8dc6b269a0c3d1ba41caac55ce"}
{"level":"debug","ts":"2026-07-12T17:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db9d61bbff118cc9651bc07483bb3a3c2245ca8dc6b269a0c3d1ba41caac55ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:01:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:01:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db9d61bbff118cc9651bc07483bb3a3c2245ca8dc6b269a0c3d1ba41caac55ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db9d61bbff118cc9651bc07483bb3a3c2245ca8dc6b269a0c3d1ba41caac55ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db9d61bbff118cc9651bc07483bb3a3c2245ca8dc6b269a0c3d1ba41caac55ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:01:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:01:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db9d61bbff118cc9651bc07483bb3a3c2245ca8dc6b269a0c3d1ba41caac55ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad434f64c9b7289ecf311bc3c1a7eccfe5074a5763f02eabad7edf9e9ef53955","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db9d61bbff118cc9651bc07483bb3a3c2245ca8dc6b269a0c3d1ba41caac55ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db9d61bbff118cc9651bc07483bb3a3c2245ca8dc6b269a0c3d1ba41caac55ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db9d61bbff118cc9651bc07483bb3a3c2245ca8dc6b269a0c3d1ba41caac55ce"}
{"level":"debug","ts":"2026-07-12T17:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db9d61bbff118cc9651bc07483bb3a3c2245ca8dc6b269a0c3d1ba41caac55ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:01:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:01:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db9d61bbff118cc9651bc07483bb3a3c2245ca8dc6b269a0c3d1ba41caac55ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad434f64c9b7289ecf311bc3c1a7eccfe5074a5763f02eabad7edf9e9ef53955"}
{"level":"info","ts":"2026-07-12T17:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db9d61bbff118cc9651bc07483bb3a3c2245ca8dc6b269a0c3d1ba41caac55ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db9d61bbff118cc9651bc07483bb3a3c2245ca8dc6b269a0c3d1ba41caac55ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:01:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:01:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db9d61bbff118cc9651bc07483bb3a3c2245ca8dc6b269a0c3d1ba41caac55ce"}
{"level":"info","ts":"2026-07-12T17:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db9d61bbff118cc9651bc07483bb3a3c2245ca8dc6b269a0c3d1ba41caac55ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db9d61bbff118cc9651bc07483bb3a3c2245ca8dc6b269a0c3d1ba41caac55ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db9d61bbff118cc9651bc07483bb3a3c2245ca8dc6b269a0c3d1ba41caac55ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db9d61bbff118cc9651bc07483bb3a3c2245ca8dc6b269a0c3d1ba41caac55ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3bc455b62d90d7130f7e503adc401d8090bed2b617d910243618e06da463dc8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db9d61bbff118cc9651bc07483bb3a3c2245ca8dc6b269a0c3d1ba41caac55ce"}
{"level":"debug","ts":"2026-07-12T17:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db9d61bbff118cc9651bc07483bb3a3c2245ca8dc6b269a0c3d1ba41caac55ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:01:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:01:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db9d61bbff118cc9651bc07483bb3a3c2245ca8dc6b269a0c3d1ba41caac55ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3bc455b62d90d7130f7e503adc401d8090bed2b617d910243618e06da463dc8"}
{"level":"info","ts":"2026-07-12T17:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db9d61bbff118cc9651bc07483bb3a3c2245ca8dc6b269a0c3d1ba41caac55ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db9d61bbff118cc9651bc07483bb3a3c2245ca8dc6b269a0c3d1ba41caac55ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:01:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:01:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db9d61bbff118cc9651bc07483bb3a3c2245ca8dc6b269a0c3d1ba41caac55ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db9d61bbff118cc9651bc07483bb3a3c2245ca8dc6b269a0c3d1ba41caac55ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db9d61bbff118cc9651bc07483bb3a3c2245ca8dc6b269a0c3d1ba41caac55ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db9d61bbff118cc9651bc07483bb3a3c2245ca8dc6b269a0c3d1ba41caac55ce"}
{"level":"debug","ts":"2026-07-12T17:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db9d61bbff118cc9651bc07483bb3a3c2245ca8dc6b269a0c3d1ba41caac55ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db9d61bbff118cc9651bc07483bb3a3c2245ca8dc6b269a0c3d1ba41caac55ce"}
{"level":"debug","ts":"2026-07-12T17:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e5a55606479a9452f103cb5fb40857ac0ad805336d83bbdfec7e599c9b3e724","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e5a55606479a9452f103cb5fb40857ac0ad805336d83bbdfec7e599c9b3e724"}
{"level":"debug","ts":"2026-07-12T17:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db9d61bbff118cc9651bc07483bb3a3c2245ca8dc6b269a0c3d1ba41caac55ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:01:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:01:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db9d61bbff118cc9651bc07483bb3a3c2245ca8dc6b269a0c3d1ba41caac55ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db9d61bbff118cc9651bc07483bb3a3c2245ca8dc6b269a0c3d1ba41caac55ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db9d61bbff118cc9651bc07483bb3a3c2245ca8dc6b269a0c3d1ba41caac55ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db9d61bbff118cc9651bc07483bb3a3c2245ca8dc6b269a0c3d1ba41caac55ce"}
{"level":"debug","ts":"2026-07-12T17:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ad62af8d9ee34a2581185c374677188874f92016ead4bf32729c9fc9917fab3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:01:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:01:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ad62af8d9ee34a2581185c374677188874f92016ead4bf32729c9fc9917fab3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e05e44d44b54ac88d19515bc3a509e60debb052f333eac16d1f2da68a1cf096","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ad62af8d9ee34a2581185c374677188874f92016ead4bf32729c9fc9917fab3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ad62af8d9ee34a2581185c374677188874f92016ead4bf32729c9fc9917fab3"}
{"level":"debug","ts":"2026-07-12T17:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ad62af8d9ee34a2581185c374677188874f92016ead4bf32729c9fc9917fab3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:01:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:01:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ad62af8d9ee34a2581185c374677188874f92016ead4bf32729c9fc9917fab3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ad62af8d9ee34a2581185c374677188874f92016ead4bf32729c9fc9917fab3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ad62af8d9ee34a2581185c374677188874f92016ead4bf32729c9fc9917fab3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e05e44d44b54ac88d19515bc3a509e60debb052f333eac16d1f2da68a1cf096"}
{"level":"info","ts":"2026-07-12T17:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ad62af8d9ee34a2581185c374677188874f92016ead4bf32729c9fc9917fab3"}
{"level":"debug","ts":"2026-07-12T17:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5548e9b82888f4a43715c4cd0e753e25769d6ba4e8fb3766cfb593f4c18c1ff1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:01:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:01:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5548e9b82888f4a43715c4cd0e753e25769d6ba4e8fb3766cfb593f4c18c1ff1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5548e9b82888f4a43715c4cd0e753e25769d6ba4e8fb3766cfb593f4c18c1ff1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5548e9b82888f4a43715c4cd0e753e25769d6ba4e8fb3766cfb593f4c18c1ff1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5548e9b82888f4a43715c4cd0e753e25769d6ba4e8fb3766cfb593f4c18c1ff1"}
{"level":"debug","ts":"2026-07-12T17:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5548e9b82888f4a43715c4cd0e753e25769d6ba4e8fb3766cfb593f4c18c1ff1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5548e9b82888f4a43715c4cd0e753e25769d6ba4e8fb3766cfb593f4c18c1ff1"}
{"level":"debug","ts":"2026-07-12T17:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5548e9b82888f4a43715c4cd0e753e25769d6ba4e8fb3766cfb593f4c18c1ff1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:01:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:01:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5548e9b82888f4a43715c4cd0e753e25769d6ba4e8fb3766cfb593f4c18c1ff1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5548e9b82888f4a43715c4cd0e753e25769d6ba4e8fb3766cfb593f4c18c1ff1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5548e9b82888f4a43715c4cd0e753e25769d6ba4e8fb3766cfb593f4c18c1ff1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:01:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:01:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5548e9b82888f4a43715c4cd0e753e25769d6ba4e8fb3766cfb593f4c18c1ff1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5548e9b82888f4a43715c4cd0e753e25769d6ba4e8fb3766cfb593f4c18c1ff1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5548e9b82888f4a43715c4cd0e753e25769d6ba4e8fb3766cfb593f4c18c1ff1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5548e9b82888f4a43715c4cd0e753e25769d6ba4e8fb3766cfb593f4c18c1ff1"}
{"level":"debug","ts":"2026-07-12T17:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5548e9b82888f4a43715c4cd0e753e25769d6ba4e8fb3766cfb593f4c18c1ff1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5548e9b82888f4a43715c4cd0e753e25769d6ba4e8fb3766cfb593f4c18c1ff1"}
{"level":"debug","ts":"2026-07-12T17:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5548e9b82888f4a43715c4cd0e753e25769d6ba4e8fb3766cfb593f4c18c1ff1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:01:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:01:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5548e9b82888f4a43715c4cd0e753e25769d6ba4e8fb3766cfb593f4c18c1ff1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5548e9b82888f4a43715c4cd0e753e25769d6ba4e8fb3766cfb593f4c18c1ff1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5548e9b82888f4a43715c4cd0e753e25769d6ba4e8fb3766cfb593f4c18c1ff1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:01:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:01:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5548e9b82888f4a43715c4cd0e753e25769d6ba4e8fb3766cfb593f4c18c1ff1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"340ca319709705ff1515877fe439c68a7ba4f884e92d131d7ddd131939e59b0d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5548e9b82888f4a43715c4cd0e753e25769d6ba4e8fb3766cfb593f4c18c1ff1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5548e9b82888f4a43715c4cd0e753e25769d6ba4e8fb3766cfb593f4c18c1ff1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89f80746271497fd3f6830a08c68f4e2cfca03b0297731eaa52216ffb0f6c9ba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5548e9b82888f4a43715c4cd0e753e25769d6ba4e8fb3766cfb593f4c18c1ff1"}
{"level":"debug","ts":"2026-07-12T17:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5548e9b82888f4a43715c4cd0e753e25769d6ba4e8fb3766cfb593f4c18c1ff1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:01:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:01:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5548e9b82888f4a43715c4cd0e753e25769d6ba4e8fb3766cfb593f4c18c1ff1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/340ca319709705ff1515877fe439c68a7ba4f884e92d131d7ddd131939e59b0d"}
{"level":"info","ts":"2026-07-12T17:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5548e9b82888f4a43715c4cd0e753e25769d6ba4e8fb3766cfb593f4c18c1ff1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5548e9b82888f4a43715c4cd0e753e25769d6ba4e8fb3766cfb593f4c18c1ff1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89f80746271497fd3f6830a08c68f4e2cfca03b0297731eaa52216ffb0f6c9ba"}
{"level":"info","ts":"2026-07-12T17:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5548e9b82888f4a43715c4cd0e753e25769d6ba4e8fb3766cfb593f4c18c1ff1"}
{"level":"debug","ts":"2026-07-12T17:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd63aa61be1fba0d3ec50121c2420265a00458272b945bb5d094fe76d0cf2cff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:01:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:01:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd63aa61be1fba0d3ec50121c2420265a00458272b945bb5d094fe76d0cf2cff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd63aa61be1fba0d3ec50121c2420265a00458272b945bb5d094fe76d0cf2cff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cde92dd7726d79f7bd551b9e7763c74ee5b8a1b8410d89a303259049c0839ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd63aa61be1fba0d3ec50121c2420265a00458272b945bb5d094fe76d0cf2cff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd63aa61be1fba0d3ec50121c2420265a00458272b945bb5d094fe76d0cf2cff"}
{"level":"debug","ts":"2026-07-12T17:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd63aa61be1fba0d3ec50121c2420265a00458272b945bb5d094fe76d0cf2cff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:01:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:01:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd63aa61be1fba0d3ec50121c2420265a00458272b945bb5d094fe76d0cf2cff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cde92dd7726d79f7bd551b9e7763c74ee5b8a1b8410d89a303259049c0839ec"}
{"level":"info","ts":"2026-07-12T17:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd63aa61be1fba0d3ec50121c2420265a00458272b945bb5d094fe76d0cf2cff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd63aa61be1fba0d3ec50121c2420265a00458272b945bb5d094fe76d0cf2cff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:01:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:01:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd63aa61be1fba0d3ec50121c2420265a00458272b945bb5d094fe76d0cf2cff"}
{"level":"info","ts":"2026-07-12T17:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd63aa61be1fba0d3ec50121c2420265a00458272b945bb5d094fe76d0cf2cff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd63aa61be1fba0d3ec50121c2420265a00458272b945bb5d094fe76d0cf2cff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd63aa61be1fba0d3ec50121c2420265a00458272b945bb5d094fe76d0cf2cff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd63aa61be1fba0d3ec50121c2420265a00458272b945bb5d094fe76d0cf2cff"}
{"level":"debug","ts":"2026-07-12T17:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd63aa61be1fba0d3ec50121c2420265a00458272b945bb5d094fe76d0cf2cff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87e8234b0867ada95f1489ee697249881693d9753abef33fd0127d896d2974de","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd63aa61be1fba0d3ec50121c2420265a00458272b945bb5d094fe76d0cf2cff"}
{"level":"debug","ts":"2026-07-12T17:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"437f16a6776137cc60ba8b73365431e51c8a343382f13d887b3eab13d939f26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"184cca99a77fd07d7013e77db311492c46cb47cdadae0e1cd84c568499c26a98","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87e8234b0867ada95f1489ee697249881693d9753abef33fd0127d896d2974de"}
{"level":"debug","ts":"2026-07-12T17:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd63aa61be1fba0d3ec50121c2420265a00458272b945bb5d094fe76d0cf2cff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:01:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:01:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd63aa61be1fba0d3ec50121c2420265a00458272b945bb5d094fe76d0cf2cff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd63aa61be1fba0d3ec50121c2420265a00458272b945bb5d094fe76d0cf2cff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c7710343b678191ba24e6e320fd25f1ee750ab146aa275b9a52a56ddc9693fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd63aa61be1fba0d3ec50121c2420265a00458272b945bb5d094fe76d0cf2cff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/437f16a6776137cc60ba8b73365431e51c8a343382f13d887b3eab13d939f26b"}
{"level":"info","ts":"2026-07-12T17:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/184cca99a77fd07d7013e77db311492c46cb47cdadae0e1cd84c568499c26a98"}
{"level":"info","ts":"2026-07-12T17:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c7710343b678191ba24e6e320fd25f1ee750ab146aa275b9a52a56ddc9693fb"}
{"level":"debug","ts":"2026-07-12T17:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c71fb8a3fcb5ea40768671362679a17b840b8b2d467c46421d9681683705d454","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4067f34a83ab6144d84ae38cc38f751f0f8a322f26996f7192ea06dc31a9d45","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd63aa61be1fba0d3ec50121c2420265a00458272b945bb5d094fe76d0cf2cff"}
{"level":"debug","ts":"2026-07-12T17:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58b895e8e642d5acfc2c5b4ac474da2e0e53c30456c137e19199cc80cc72decf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c71fb8a3fcb5ea40768671362679a17b840b8b2d467c46421d9681683705d454"}
{"level":"debug","ts":"2026-07-12T17:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1e79fa8766e41a965c0854701cc9042de853fb0d2e557a45d8570914744a075","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4067f34a83ab6144d84ae38cc38f751f0f8a322f26996f7192ea06dc31a9d45"}
{"level":"debug","ts":"2026-07-12T17:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19f827e52ebc2f6643692df7e59fab6a7e7f91b386bc3aaff0b11480aa047e8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e943e0125d86596b11aacd89865bc3d2ed7cdfff73ed42379f502f3f4c898bcd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58b895e8e642d5acfc2c5b4ac474da2e0e53c30456c137e19199cc80cc72decf"}
{"level":"debug","ts":"2026-07-12T17:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2256d98da01e9aaf1f463461911a0370c60e5573abcf53f6c4847bc513e1a88a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1e79fa8766e41a965c0854701cc9042de853fb0d2e557a45d8570914744a075"}
{"level":"debug","ts":"2026-07-12T17:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11e3eb4660deb7a7c9f3bf6b1cff0a73368c4a4df78af68960263a5fa0cff2f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19f827e52ebc2f6643692df7e59fab6a7e7f91b386bc3aaff0b11480aa047e8b"}
{"level":"debug","ts":"2026-07-12T17:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da072b4ab52b94d3e926219e4f0b16eaec8f51a358b3d7c8d857ae986134030b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e943e0125d86596b11aacd89865bc3d2ed7cdfff73ed42379f502f3f4c898bcd"}
{"level":"info","ts":"2026-07-12T17:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2256d98da01e9aaf1f463461911a0370c60e5573abcf53f6c4847bc513e1a88a"}
{"level":"info","ts":"2026-07-12T17:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11e3eb4660deb7a7c9f3bf6b1cff0a73368c4a4df78af68960263a5fa0cff2f9"}
{"level":"info","ts":"2026-07-12T17:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da072b4ab52b94d3e926219e4f0b16eaec8f51a358b3d7c8d857ae986134030b"}
{"level":"info","ts":"2026-07-12T17:01:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b0b1afb5-f57a-46dc-a894-f4e963e3002c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50638","PortSpecifier":{"PortValue":50638}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b0b1afb5-f57a-46dc-a894-f4e963e3002c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-17d27e.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:01:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b0b1afb5-f57a-46dc-a894-f4e963e3002c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50638","PortSpecifier":{"PortValue":50638}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783875713,"nanos":420863978},"http":{"id":"b0b1afb5-f57a-46dc-a894-f4e963e3002c","method":"POST","headers":{":authority":"e2e-shared-a-17d27e.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:01:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b0b1afb5-f57a-46dc-a894-f4e963e3002c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-12T17:01:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b0b1afb5-f57a-46dc-a894-f4e963e3002c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3a471a63-af50-485e-8497-6203c5d354e5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=dd8475e3-e7a1-48e6-b180-67063e5b71ec"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bbc8f098c53"]}}
{"level":"debug","ts":"2026-07-12T17:01:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b0b1afb5-f57a-46dc-a894-f4e963e3002c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bbc8f098c53"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=dd8475e3-e7a1-48e6-b180-67063e5b71ec"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3a471a63-af50-485e-8497-6203c5d354e5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1e5a55606479a9452f103cb5fb40857ac0ad805336d83bbdfec7e599c9b3e724"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.31:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-17d27e.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:01:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b0b1afb5-f57a-46dc-a894-f4e963e3002c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:01:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b0b1afb5-f57a-46dc-a894-f4e963e3002c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:01:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b0b1afb5-f57a-46dc-a894-f4e963e3002c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-17d27e/sub-test-model-17d27e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:01:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b0b1afb5-f57a-46dc-a894-f4e963e3002c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-12T17:01:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b0b1afb5-f57a-46dc-a894-f4e963e3002c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-12T17:01:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b0b1afb5-f57a-46dc-a894-f4e963e3002c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-12T17:01:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b0b1afb5-f57a-46dc-a894-f4e963e3002c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:01:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b0b1afb5-f57a-46dc-a894-f4e963e3002c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:01:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"40b34ab1-ba94-477b-8162-c622b92b4925","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40214","PortSpecifier":{"PortValue":40214}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"40b34ab1-ba94-477b-8162-c622b92b4925","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-cc457c.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:01:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"40b34ab1-ba94-477b-8162-c622b92b4925","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40214","PortSpecifier":{"PortValue":40214}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783875713,"nanos":462657237},"http":{"id":"40b34ab1-ba94-477b-8162-c622b92b4925","method":"POST","headers":{":authority":"e2e-shared-b-cc457c.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:01:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"40b34ab1-ba94-477b-8162-c622b92b4925","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-12T17:01:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"40b34ab1-ba94-477b-8162-c622b92b4925","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3a471a63-af50-485e-8497-6203c5d354e5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=dd8475e3-e7a1-48e6-b180-67063e5b71ec"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bbc8f098c53"]}}
{"level":"debug","ts":"2026-07-12T17:01:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"40b34ab1-ba94-477b-8162-c622b92b4925","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bbc8f098c53"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=dd8475e3-e7a1-48e6-b180-67063e5b71ec"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3a471a63-af50-485e-8497-6203c5d354e5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0ad62af8d9ee34a2581185c374677188874f92016ead4bf32729c9fc9917fab3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-cc457c.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:01:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40b34ab1-ba94-477b-8162-c622b92b4925","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:01:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40b34ab1-ba94-477b-8162-c622b92b4925","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:01:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40b34ab1-ba94-477b-8162-c622b92b4925","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-cc457c/sub-test-model-cc457c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:01:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"40b34ab1-ba94-477b-8162-c622b92b4925","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-12T17:01:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40b34ab1-ba94-477b-8162-c622b92b4925","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T17:01:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40b34ab1-ba94-477b-8162-c622b92b4925","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-12T17:01:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"40b34ab1-ba94-477b-8162-c622b92b4925","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:01:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"40b34ab1-ba94-477b-8162-c622b92b4925","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:01:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6556b8b0-bd85-441f-93b6-9197cf6d8d12","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50644","PortSpecifier":{"PortValue":50644}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6556b8b0-bd85-441f-93b6-9197cf6d8d12","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-17d27e.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:01:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6556b8b0-bd85-441f-93b6-9197cf6d8d12","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50644","PortSpecifier":{"PortValue":50644}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783875713,"nanos":496550272},"http":{"id":"6556b8b0-bd85-441f-93b6-9197cf6d8d12","method":"GET","headers":{":authority":"e2e-shared-a-17d27e.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:01:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6556b8b0-bd85-441f-93b6-9197cf6d8d12","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ohAVBXqCRTqVc2KD_esqB6kw7sUBToyM8L8FtmkZi13UZ2cSpn6lAsvliCs7"}
{"level":"debug","ts":"2026-07-12T17:01:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6556b8b0-bd85-441f-93b6-9197cf6d8d12","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-17d27e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ohAVBXqCRTqVc2KD_esqB6kw7sUBToyM8L8FtmkZi13UZ2cSpn6lAsvliCs7\"}"}
{"level":"debug","ts":"2026-07-12T17:01:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6556b8b0-bd85-441f-93b6-9197cf6d8d12","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-17d27e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"66033f5c-b1e1-4240-b1db-92806402b8cc","keyName":"e2e-sub-iso-72e9c6","subscription":"e2e-a-only-94a801","tenant":"e2e-shared-a-17d27e","userId":"66033f5c-b1e1-4240-b1db-92806402b8cc","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-12T17:01:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6556b8b0-bd85-441f-93b6-9197cf6d8d12","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:01:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6556b8b0-bd85-441f-93b6-9197cf6d8d12","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:01:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6556b8b0-bd85-441f-93b6-9197cf6d8d12","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:01:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6556b8b0-bd85-441f-93b6-9197cf6d8d12","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-17d27e/sub-test-model-17d27e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:01:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6556b8b0-bd85-441f-93b6-9197cf6d8d12","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-12T17:01:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6556b8b0-bd85-441f-93b6-9197cf6d8d12","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-94a801"}
{"level":"debug","ts":"2026-07-12T17:01:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6556b8b0-bd85-441f-93b6-9197cf6d8d12","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-12T17:01:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6556b8b0-bd85-441f-93b6-9197cf6d8d12","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-12T17:01:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6556b8b0-bd85-441f-93b6-9197cf6d8d12","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:01:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6556b8b0-bd85-441f-93b6-9197cf6d8d12","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:01:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cf0b8e09-493c-4f79-9730-31aff395a6f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40216","PortSpecifier":{"PortValue":40216}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cf0b8e09-493c-4f79-9730-31aff395a6f2","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-cc457c.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:01:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cf0b8e09-493c-4f79-9730-31aff395a6f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40216","PortSpecifier":{"PortValue":40216}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783875713,"nanos":530958531},"http":{"id":"cf0b8e09-493c-4f79-9730-31aff395a6f2","method":"GET","headers":{":authority":"e2e-shared-b-cc457c.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:01:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cf0b8e09-493c-4f79-9730-31aff395a6f2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1SP8HNVFLiFMbo6UX_tOXoq2kSIfFZoLAfOgKyBJYDOCC6bvFA13MntZFG8Uj"}
{"level":"debug","ts":"2026-07-12T17:01:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cf0b8e09-493c-4f79-9730-31aff395a6f2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-cc457c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1SP8HNVFLiFMbo6UX_tOXoq2kSIfFZoLAfOgKyBJYDOCC6bvFA13MntZFG8Uj\"}"}
{"level":"debug","ts":"2026-07-12T17:01:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cf0b8e09-493c-4f79-9730-31aff395a6f2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-cc457c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"775aea18-1216-43e7-914b-6c8d88b3c5f2","keyName":"e2e-sub-iso-fe0790","subscription":"e2e-b-only-94a801","tenant":"e2e-shared-b-cc457c","userId":"775aea18-1216-43e7-914b-6c8d88b3c5f2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-12T17:01:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cf0b8e09-493c-4f79-9730-31aff395a6f2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:01:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cf0b8e09-493c-4f79-9730-31aff395a6f2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:01:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cf0b8e09-493c-4f79-9730-31aff395a6f2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:01:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cf0b8e09-493c-4f79-9730-31aff395a6f2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-cc457c/sub-test-model-cc457c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:01:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cf0b8e09-493c-4f79-9730-31aff395a6f2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-12T17:01:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cf0b8e09-493c-4f79-9730-31aff395a6f2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T17:01:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cf0b8e09-493c-4f79-9730-31aff395a6f2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-12T17:01:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cf0b8e09-493c-4f79-9730-31aff395a6f2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-94a801"}
{"level":"info","ts":"2026-07-12T17:01:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cf0b8e09-493c-4f79-9730-31aff395a6f2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:01:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cf0b8e09-493c-4f79-9730-31aff395a6f2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:02:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e87f41c2-b0a1-485f-b3c3-14a724a43722","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50656","PortSpecifier":{"PortValue":50656}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e87f41c2-b0a1-485f-b3c3-14a724a43722","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-17d27e.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:02:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e87f41c2-b0a1-485f-b3c3-14a724a43722","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50656","PortSpecifier":{"PortValue":50656}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783875721,"nanos":462428312},"http":{"id":"e87f41c2-b0a1-485f-b3c3-14a724a43722","method":"POST","headers":{":authority":"e2e-shared-a-17d27e.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:02:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e87f41c2-b0a1-485f-b3c3-14a724a43722","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-12T17:02:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e87f41c2-b0a1-485f-b3c3-14a724a43722","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3a471a63-af50-485e-8497-6203c5d354e5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=dd8475e3-e7a1-48e6-b180-67063e5b71ec"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bbc8f098c53"]}}
{"level":"debug","ts":"2026-07-12T17:02:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e87f41c2-b0a1-485f-b3c3-14a724a43722","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bbc8f098c53"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=dd8475e3-e7a1-48e6-b180-67063e5b71ec"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3a471a63-af50-485e-8497-6203c5d354e5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1e5a55606479a9452f103cb5fb40857ac0ad805336d83bbdfec7e599c9b3e724"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.31:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-17d27e.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:02:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e87f41c2-b0a1-485f-b3c3-14a724a43722","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:02:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e87f41c2-b0a1-485f-b3c3-14a724a43722","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:02:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e87f41c2-b0a1-485f-b3c3-14a724a43722","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-17d27e/sub-test-model-17d27e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:02:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e87f41c2-b0a1-485f-b3c3-14a724a43722","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-12T17:02:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e87f41c2-b0a1-485f-b3c3-14a724a43722","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T17:02:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e87f41c2-b0a1-485f-b3c3-14a724a43722","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-12T17:02:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e87f41c2-b0a1-485f-b3c3-14a724a43722","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:02:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e87f41c2-b0a1-485f-b3c3-14a724a43722","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:02:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"93c7dced-4069-4707-aa10-c65521541eb2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40220","PortSpecifier":{"PortValue":40220}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"93c7dced-4069-4707-aa10-c65521541eb2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-cc457c.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:02:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"93c7dced-4069-4707-aa10-c65521541eb2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40220","PortSpecifier":{"PortValue":40220}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783875721,"nanos":499633976},"http":{"id":"93c7dced-4069-4707-aa10-c65521541eb2","method":"POST","headers":{":authority":"e2e-shared-b-cc457c.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:02:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"93c7dced-4069-4707-aa10-c65521541eb2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-12T17:02:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"93c7dced-4069-4707-aa10-c65521541eb2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3a471a63-af50-485e-8497-6203c5d354e5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=dd8475e3-e7a1-48e6-b180-67063e5b71ec"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bbc8f098c53"]}}
{"level":"debug","ts":"2026-07-12T17:02:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"93c7dced-4069-4707-aa10-c65521541eb2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bbc8f098c53"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=dd8475e3-e7a1-48e6-b180-67063e5b71ec"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3a471a63-af50-485e-8497-6203c5d354e5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0ad62af8d9ee34a2581185c374677188874f92016ead4bf32729c9fc9917fab3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-cc457c.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:02:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93c7dced-4069-4707-aa10-c65521541eb2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:02:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93c7dced-4069-4707-aa10-c65521541eb2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:02:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93c7dced-4069-4707-aa10-c65521541eb2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-cc457c/sub-test-model-cc457c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:02:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"93c7dced-4069-4707-aa10-c65521541eb2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-12T17:02:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"93c7dced-4069-4707-aa10-c65521541eb2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T17:02:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"93c7dced-4069-4707-aa10-c65521541eb2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-12T17:02:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"93c7dced-4069-4707-aa10-c65521541eb2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:02:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"93c7dced-4069-4707-aa10-c65521541eb2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:02:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3421f79a-0443-47b5-aeb1-94b523045e38","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50668","PortSpecifier":{"PortValue":50668}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3421f79a-0443-47b5-aeb1-94b523045e38","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-17d27e.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:02:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3421f79a-0443-47b5-aeb1-94b523045e38","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50668","PortSpecifier":{"PortValue":50668}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783875721,"nanos":554771012},"http":{"id":"3421f79a-0443-47b5-aeb1-94b523045e38","method":"POST","headers":{":authority":"e2e-shared-a-17d27e.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:02:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3421f79a-0443-47b5-aeb1-94b523045e38","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-8ROfaey3KKfLbp25_v8ksHsAVtZJRdJkoXIeraImlGuGSQHmgtrMtWcv2Zsu"}
{"level":"debug","ts":"2026-07-12T17:02:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3421f79a-0443-47b5-aeb1-94b523045e38","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-17d27e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-8ROfaey3KKfLbp25_v8ksHsAVtZJRdJkoXIeraImlGuGSQHmgtrMtWcv2Zsu\"}"}
{"level":"debug","ts":"2026-07-12T17:02:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3421f79a-0443-47b5-aeb1-94b523045e38","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-17d27e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a269f782-6405-48fe-8fbd-ffc1698c93ff","keyName":"e2e-sub-iso-9b3489","subscription":"e2e-shared-sub-64f7d9","tenant":"e2e-shared-a-17d27e","userId":"a269f782-6405-48fe-8fbd-ffc1698c93ff","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-12T17:02:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3421f79a-0443-47b5-aeb1-94b523045e38","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:02:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3421f79a-0443-47b5-aeb1-94b523045e38","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:02:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3421f79a-0443-47b5-aeb1-94b523045e38","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:02:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3421f79a-0443-47b5-aeb1-94b523045e38","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-17d27e/sub-test-model-17d27e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:02:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3421f79a-0443-47b5-aeb1-94b523045e38","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-12T17:02:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3421f79a-0443-47b5-aeb1-94b523045e38","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T17:02:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3421f79a-0443-47b5-aeb1-94b523045e38","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-64f7d9"}
{"level":"debug","ts":"2026-07-12T17:02:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3421f79a-0443-47b5-aeb1-94b523045e38","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-12T17:02:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3421f79a-0443-47b5-aeb1-94b523045e38","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:02:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3421f79a-0443-47b5-aeb1-94b523045e38","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:02:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9f989705-2c81-4372-8412-76c4719908f0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40224","PortSpecifier":{"PortValue":40224}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9f989705-2c81-4372-8412-76c4719908f0","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-cc457c.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:02:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9f989705-2c81-4372-8412-76c4719908f0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40224","PortSpecifier":{"PortValue":40224}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783875721,"nanos":585619421},"http":{"id":"9f989705-2c81-4372-8412-76c4719908f0","method":"POST","headers":{":authority":"e2e-shared-b-cc457c.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:02:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9f989705-2c81-4372-8412-76c4719908f0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1SrnSrABcgGtSJdA3_i0VaNcYYP6NDEFlIkGePrzkAmRHzqLHybxAtrFfzysn"}
{"level":"debug","ts":"2026-07-12T17:02:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9f989705-2c81-4372-8412-76c4719908f0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-cc457c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1SrnSrABcgGtSJdA3_i0VaNcYYP6NDEFlIkGePrzkAmRHzqLHybxAtrFfzysn\"}"}
{"level":"debug","ts":"2026-07-12T17:02:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9f989705-2c81-4372-8412-76c4719908f0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-cc457c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cb1da016-7671-46b2-8405-54aede0d27a5","keyName":"e2e-sub-iso-a4df3f","subscription":"e2e-shared-sub-64f7d9","tenant":"e2e-shared-b-cc457c","userId":"cb1da016-7671-46b2-8405-54aede0d27a5","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-12T17:02:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9f989705-2c81-4372-8412-76c4719908f0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:02:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f989705-2c81-4372-8412-76c4719908f0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:02:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f989705-2c81-4372-8412-76c4719908f0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:02:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f989705-2c81-4372-8412-76c4719908f0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-cc457c/sub-test-model-cc457c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:02:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9f989705-2c81-4372-8412-76c4719908f0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-12T17:02:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f989705-2c81-4372-8412-76c4719908f0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T17:02:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f989705-2c81-4372-8412-76c4719908f0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-64f7d9"}
{"level":"debug","ts":"2026-07-12T17:02:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f989705-2c81-4372-8412-76c4719908f0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-12T17:02:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9f989705-2c81-4372-8412-76c4719908f0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:02:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9f989705-2c81-4372-8412-76c4719908f0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:02:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a4067f34a83ab6144d84ae38cc38f751f0f8a322f26996f7192ea06dc31a9d45"}
{"level":"info","ts":"2026-07-12T17:02:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/da072b4ab52b94d3e926219e4f0b16eaec8f51a358b3d7c8d857ae986134030b"}
{"level":"info","ts":"2026-07-12T17:02:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0e05e44d44b54ac88d19515bc3a509e60debb052f333eac16d1f2da68a1cf096"}
{"level":"info","ts":"2026-07-12T17:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9c7710343b678191ba24e6e320fd25f1ee750ab146aa275b9a52a56ddc9693fb"}
{"level":"info","ts":"2026-07-12T17:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/340ca319709705ff1515877fe439c68a7ba4f884e92d131d7ddd131939e59b0d"}
{"level":"info","ts":"2026-07-12T17:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/89f80746271497fd3f6830a08c68f4e2cfca03b0297731eaa52216ffb0f6c9ba"}
{"level":"info","ts":"2026-07-12T17:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2256d98da01e9aaf1f463461911a0370c60e5573abcf53f6c4847bc513e1a88a"}
{"level":"info","ts":"2026-07-12T17:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cd63aa61be1fba0d3ec50121c2420265a00458272b945bb5d094fe76d0cf2cff"}
{"level":"info","ts":"2026-07-12T17:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/58b895e8e642d5acfc2c5b4ac474da2e0e53c30456c137e19199cc80cc72decf"}
{"level":"info","ts":"2026-07-12T17:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/db9d61bbff118cc9651bc07483bb3a3c2245ca8dc6b269a0c3d1ba41caac55ce"}
{"level":"info","ts":"2026-07-12T17:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/11e3eb4660deb7a7c9f3bf6b1cff0a73368c4a4df78af68960263a5fa0cff2f9"}
{"level":"info","ts":"2026-07-12T17:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5548e9b82888f4a43715c4cd0e753e25769d6ba4e8fb3766cfb593f4c18c1ff1"}
{"level":"info","ts":"2026-07-12T17:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/184cca99a77fd07d7013e77db311492c46cb47cdadae0e1cd84c568499c26a98"}
{"level":"info","ts":"2026-07-12T17:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/87e8234b0867ada95f1489ee697249881693d9753abef33fd0127d896d2974de"}
{"level":"info","ts":"2026-07-12T17:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b1e79fa8766e41a965c0854701cc9042de853fb0d2e557a45d8570914744a075"}
{"level":"info","ts":"2026-07-12T17:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d3bc455b62d90d7130f7e503adc401d8090bed2b617d910243618e06da463dc8"}
{"level":"debug","ts":"2026-07-12T17:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21b4063652b2b6e8273bd559b265630af813c94436c3b696fb085e2d95e554a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:02:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:02:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21b4063652b2b6e8273bd559b265630af813c94436c3b696fb085e2d95e554a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21b4063652b2b6e8273bd559b265630af813c94436c3b696fb085e2d95e554a0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21b4063652b2b6e8273bd559b265630af813c94436c3b696fb085e2d95e554a0"}
{"level":"debug","ts":"2026-07-12T17:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21b4063652b2b6e8273bd559b265630af813c94436c3b696fb085e2d95e554a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21b4063652b2b6e8273bd559b265630af813c94436c3b696fb085e2d95e554a0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21b4063652b2b6e8273bd559b265630af813c94436c3b696fb085e2d95e554a0"}
{"level":"debug","ts":"2026-07-12T17:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21b4063652b2b6e8273bd559b265630af813c94436c3b696fb085e2d95e554a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:02:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:02:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["21b4063652b2b6e8273bd559b265630af813c94436c3b696fb085e2d95e554a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21b4063652b2b6e8273bd559b265630af813c94436c3b696fb085e2d95e554a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c8c850e9c7afa7ac670bc24709b02d90c87fe26eb57daab49d417d5471b5280","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:02:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:02:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c8c850e9c7afa7ac670bc24709b02d90c87fe26eb57daab49d417d5471b5280","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21b4063652b2b6e8273bd559b265630af813c94436c3b696fb085e2d95e554a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c8c850e9c7afa7ac670bc24709b02d90c87fe26eb57daab49d417d5471b5280","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c8c850e9c7afa7ac670bc24709b02d90c87fe26eb57daab49d417d5471b5280"}
{"level":"debug","ts":"2026-07-12T17:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c8c850e9c7afa7ac670bc24709b02d90c87fe26eb57daab49d417d5471b5280","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:02:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:02:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c8c850e9c7afa7ac670bc24709b02d90c87fe26eb57daab49d417d5471b5280"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c8c850e9c7afa7ac670bc24709b02d90c87fe26eb57daab49d417d5471b5280","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c8c850e9c7afa7ac670bc24709b02d90c87fe26eb57daab49d417d5471b5280","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21b4063652b2b6e8273bd559b265630af813c94436c3b696fb085e2d95e554a0"}
{"level":"info","ts":"2026-07-12T17:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c8c850e9c7afa7ac670bc24709b02d90c87fe26eb57daab49d417d5471b5280"}
{"level":"debug","ts":"2026-07-12T17:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf7c5de8e6617d6d10695630b95082dd3a9ca7c0ff2d386881f3204203cf24be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:02:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:02:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf7c5de8e6617d6d10695630b95082dd3a9ca7c0ff2d386881f3204203cf24be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf7c5de8e6617d6d10695630b95082dd3a9ca7c0ff2d386881f3204203cf24be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:02:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:02:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf7c5de8e6617d6d10695630b95082dd3a9ca7c0ff2d386881f3204203cf24be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf7c5de8e6617d6d10695630b95082dd3a9ca7c0ff2d386881f3204203cf24be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:02:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:02:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-12T17:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cf7c5de8e6617d6d10695630b95082dd3a9ca7c0ff2d386881f3204203cf24be","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cf7c5de8e6617d6d10695630b95082dd3a9ca7c0ff2d386881f3204203cf24be\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-12T17:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf7c5de8e6617d6d10695630b95082dd3a9ca7c0ff2d386881f3204203cf24be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf7c5de8e6617d6d10695630b95082dd3a9ca7c0ff2d386881f3204203cf24be","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf7c5de8e6617d6d10695630b95082dd3a9ca7c0ff2d386881f3204203cf24be"}
{"level":"info","ts":"2026-07-12T17:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf7c5de8e6617d6d10695630b95082dd3a9ca7c0ff2d386881f3204203cf24be"}
{"level":"debug","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8c13dd4cef55aff21482ed92f666342ccf51fc9866e6cdccc63499736e5c9c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8c13dd4cef55aff21482ed92f666342ccf51fc9866e6cdccc63499736e5c9c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8c13dd4cef55aff21482ed92f666342ccf51fc9866e6cdccc63499736e5c9c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8c13dd4cef55aff21482ed92f666342ccf51fc9866e6cdccc63499736e5c9c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8c13dd4cef55aff21482ed92f666342ccf51fc9866e6cdccc63499736e5c9c7"}
{"level":"debug","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf7c5de8e6617d6d10695630b95082dd3a9ca7c0ff2d386881f3204203cf24be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf7c5de8e6617d6d10695630b95082dd3a9ca7c0ff2d386881f3204203cf24be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf7c5de8e6617d6d10695630b95082dd3a9ca7c0ff2d386881f3204203cf24be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf7c5de8e6617d6d10695630b95082dd3a9ca7c0ff2d386881f3204203cf24be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8c13dd4cef55aff21482ed92f666342ccf51fc9866e6cdccc63499736e5c9c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8c13dd4cef55aff21482ed92f666342ccf51fc9866e6cdccc63499736e5c9c7"}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf7c5de8e6617d6d10695630b95082dd3a9ca7c0ff2d386881f3204203cf24be"}
{"level":"debug","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8c13dd4cef55aff21482ed92f666342ccf51fc9866e6cdccc63499736e5c9c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8c13dd4cef55aff21482ed92f666342ccf51fc9866e6cdccc63499736e5c9c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8c13dd4cef55aff21482ed92f666342ccf51fc9866e6cdccc63499736e5c9c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8c13dd4cef55aff21482ed92f666342ccf51fc9866e6cdccc63499736e5c9c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8c13dd4cef55aff21482ed92f666342ccf51fc9866e6cdccc63499736e5c9c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8c13dd4cef55aff21482ed92f666342ccf51fc9866e6cdccc63499736e5c9c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8c13dd4cef55aff21482ed92f666342ccf51fc9866e6cdccc63499736e5c9c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8c13dd4cef55aff21482ed92f666342ccf51fc9866e6cdccc63499736e5c9c7"}
{"level":"debug","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8c13dd4cef55aff21482ed92f666342ccf51fc9866e6cdccc63499736e5c9c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8c13dd4cef55aff21482ed92f666342ccf51fc9866e6cdccc63499736e5c9c7"}
{"level":"debug","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8c13dd4cef55aff21482ed92f666342ccf51fc9866e6cdccc63499736e5c9c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8c13dd4cef55aff21482ed92f666342ccf51fc9866e6cdccc63499736e5c9c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8c13dd4cef55aff21482ed92f666342ccf51fc9866e6cdccc63499736e5c9c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8c13dd4cef55aff21482ed92f666342ccf51fc9866e6cdccc63499736e5c9c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8c13dd4cef55aff21482ed92f666342ccf51fc9866e6cdccc63499736e5c9c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8c13dd4cef55aff21482ed92f666342ccf51fc9866e6cdccc63499736e5c9c7"}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8c13dd4cef55aff21482ed92f666342ccf51fc9866e6cdccc63499736e5c9c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8c13dd4cef55aff21482ed92f666342ccf51fc9866e6cdccc63499736e5c9c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8c13dd4cef55aff21482ed92f666342ccf51fc9866e6cdccc63499736e5c9c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc"}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8c13dd4cef55aff21482ed92f666342ccf51fc9866e6cdccc63499736e5c9c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8c13dd4cef55aff21482ed92f666342ccf51fc9866e6cdccc63499736e5c9c7"}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8c13dd4cef55aff21482ed92f666342ccf51fc9866e6cdccc63499736e5c9c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8c13dd4cef55aff21482ed92f666342ccf51fc9866e6cdccc63499736e5c9c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8c13dd4cef55aff21482ed92f666342ccf51fc9866e6cdccc63499736e5c9c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8c13dd4cef55aff21482ed92f666342ccf51fc9866e6cdccc63499736e5c9c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8c13dd4cef55aff21482ed92f666342ccf51fc9866e6cdccc63499736e5c9c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8c13dd4cef55aff21482ed92f666342ccf51fc9866e6cdccc63499736e5c9c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc"}
{"level":"error","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f8c13dd4cef55aff21482ed92f666342ccf51fc9866e6cdccc63499736e5c9c7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f8c13dd4cef55aff21482ed92f666342ccf51fc9866e6cdccc63499736e5c9c7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8c13dd4cef55aff21482ed92f666342ccf51fc9866e6cdccc63499736e5c9c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8c13dd4cef55aff21482ed92f666342ccf51fc9866e6cdccc63499736e5c9c7"}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8c13dd4cef55aff21482ed92f666342ccf51fc9866e6cdccc63499736e5c9c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc"}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8c13dd4cef55aff21482ed92f666342ccf51fc9866e6cdccc63499736e5c9c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8c13dd4cef55aff21482ed92f666342ccf51fc9866e6cdccc63499736e5c9c7"}
{"level":"error","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8c13dd4cef55aff21482ed92f666342ccf51fc9866e6cdccc63499736e5c9c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8c13dd4cef55aff21482ed92f666342ccf51fc9866e6cdccc63499736e5c9c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8c13dd4cef55aff21482ed92f666342ccf51fc9866e6cdccc63499736e5c9c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc"}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8c13dd4cef55aff21482ed92f666342ccf51fc9866e6cdccc63499736e5c9c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8c13dd4cef55aff21482ed92f666342ccf51fc9866e6cdccc63499736e5c9c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8c13dd4cef55aff21482ed92f666342ccf51fc9866e6cdccc63499736e5c9c7"}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8c13dd4cef55aff21482ed92f666342ccf51fc9866e6cdccc63499736e5c9c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8c13dd4cef55aff21482ed92f666342ccf51fc9866e6cdccc63499736e5c9c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc"}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8c13dd4cef55aff21482ed92f666342ccf51fc9866e6cdccc63499736e5c9c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8c13dd4cef55aff21482ed92f666342ccf51fc9866e6cdccc63499736e5c9c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8c13dd4cef55aff21482ed92f666342ccf51fc9866e6cdccc63499736e5c9c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8c13dd4cef55aff21482ed92f666342ccf51fc9866e6cdccc63499736e5c9c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8c13dd4cef55aff21482ed92f666342ccf51fc9866e6cdccc63499736e5c9c7"}
{"level":"debug","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8c13dd4cef55aff21482ed92f666342ccf51fc9866e6cdccc63499736e5c9c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8c13dd4cef55aff21482ed92f666342ccf51fc9866e6cdccc63499736e5c9c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8c13dd4cef55aff21482ed92f666342ccf51fc9866e6cdccc63499736e5c9c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8c13dd4cef55aff21482ed92f666342ccf51fc9866e6cdccc63499736e5c9c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc"}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8c13dd4cef55aff21482ed92f666342ccf51fc9866e6cdccc63499736e5c9c7"}
{"level":"debug","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b338ac32099368b91dd32f475c7f0bf5d57c8ba73b4f878b6634828537afd762","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b338ac32099368b91dd32f475c7f0bf5d57c8ba73b4f878b6634828537afd762","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b338ac32099368b91dd32f475c7f0bf5d57c8ba73b4f878b6634828537afd762","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b338ac32099368b91dd32f475c7f0bf5d57c8ba73b4f878b6634828537afd762"}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b338ac32099368b91dd32f475c7f0bf5d57c8ba73b4f878b6634828537afd762","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b338ac32099368b91dd32f475c7f0bf5d57c8ba73b4f878b6634828537afd762","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b338ac32099368b91dd32f475c7f0bf5d57c8ba73b4f878b6634828537afd762","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b338ac32099368b91dd32f475c7f0bf5d57c8ba73b4f878b6634828537afd762\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b338ac32099368b91dd32f475c7f0bf5d57c8ba73b4f878b6634828537afd762","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b338ac32099368b91dd32f475c7f0bf5d57c8ba73b4f878b6634828537afd762","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b338ac32099368b91dd32f475c7f0bf5d57c8ba73b4f878b6634828537afd762"}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b338ac32099368b91dd32f475c7f0bf5d57c8ba73b4f878b6634828537afd762"}
{"level":"debug","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c647ed957e63cbf54bf0e6aca624f617d50d4138ec83568d56713527a136df67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c647ed957e63cbf54bf0e6aca624f617d50d4138ec83568d56713527a136df67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ed7eb2cc166d88133af26c95c5b5bf3a78c10f192c422b1c0d5637d53be7fc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c647ed957e63cbf54bf0e6aca624f617d50d4138ec83568d56713527a136df67"}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ed7eb2cc166d88133af26c95c5b5bf3a78c10f192c422b1c0d5637d53be7fc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c647ed957e63cbf54bf0e6aca624f617d50d4138ec83568d56713527a136df67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c647ed957e63cbf54bf0e6aca624f617d50d4138ec83568d56713527a136df67"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ed7eb2cc166d88133af26c95c5b5bf3a78c10f192c422b1c0d5637d53be7fc0"}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c647ed957e63cbf54bf0e6aca624f617d50d4138ec83568d56713527a136df67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b338ac32099368b91dd32f475c7f0bf5d57c8ba73b4f878b6634828537afd762","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b338ac32099368b91dd32f475c7f0bf5d57c8ba73b4f878b6634828537afd762"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b338ac32099368b91dd32f475c7f0bf5d57c8ba73b4f878b6634828537afd762","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ed7eb2cc166d88133af26c95c5b5bf3a78c10f192c422b1c0d5637d53be7fc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ed7eb2cc166d88133af26c95c5b5bf3a78c10f192c422b1c0d5637d53be7fc0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c647ed957e63cbf54bf0e6aca624f617d50d4138ec83568d56713527a136df67"}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ed7eb2cc166d88133af26c95c5b5bf3a78c10f192c422b1c0d5637d53be7fc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c647ed957e63cbf54bf0e6aca624f617d50d4138ec83568d56713527a136df67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b338ac32099368b91dd32f475c7f0bf5d57c8ba73b4f878b6634828537afd762","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ed7eb2cc166d88133af26c95c5b5bf3a78c10f192c422b1c0d5637d53be7fc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ed7eb2cc166d88133af26c95c5b5bf3a78c10f192c422b1c0d5637d53be7fc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ed7eb2cc166d88133af26c95c5b5bf3a78c10f192c422b1c0d5637d53be7fc0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ed7eb2cc166d88133af26c95c5b5bf3a78c10f192c422b1c0d5637d53be7fc0"}
{"level":"debug","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ed7eb2cc166d88133af26c95c5b5bf3a78c10f192c422b1c0d5637d53be7fc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ed7eb2cc166d88133af26c95c5b5bf3a78c10f192c422b1c0d5637d53be7fc0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ed7eb2cc166d88133af26c95c5b5bf3a78c10f192c422b1c0d5637d53be7fc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ed7eb2cc166d88133af26c95c5b5bf3a78c10f192c422b1c0d5637d53be7fc0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b338ac32099368b91dd32f475c7f0bf5d57c8ba73b4f878b6634828537afd762"}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c647ed957e63cbf54bf0e6aca624f617d50d4138ec83568d56713527a136df67"}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ed7eb2cc166d88133af26c95c5b5bf3a78c10f192c422b1c0d5637d53be7fc0"}
{"level":"debug","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6b1651cd51394c97c5005e795e059183f19f0c40a01e94fc93ecf57e40f1251","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:02:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:02:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6b1651cd51394c97c5005e795e059183f19f0c40a01e94fc93ecf57e40f1251","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6b1651cd51394c97c5005e795e059183f19f0c40a01e94fc93ecf57e40f1251","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6b1651cd51394c97c5005e795e059183f19f0c40a01e94fc93ecf57e40f1251","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6b1651cd51394c97c5005e795e059183f19f0c40a01e94fc93ecf57e40f1251"}
{"level":"debug","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6b1651cd51394c97c5005e795e059183f19f0c40a01e94fc93ecf57e40f1251","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6b1651cd51394c97c5005e795e059183f19f0c40a01e94fc93ecf57e40f1251"}
{"level":"debug","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6b1651cd51394c97c5005e795e059183f19f0c40a01e94fc93ecf57e40f1251","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:02:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:02:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6b1651cd51394c97c5005e795e059183f19f0c40a01e94fc93ecf57e40f1251"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6b1651cd51394c97c5005e795e059183f19f0c40a01e94fc93ecf57e40f1251","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6b1651cd51394c97c5005e795e059183f19f0c40a01e94fc93ecf57e40f1251","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6b1651cd51394c97c5005e795e059183f19f0c40a01e94fc93ecf57e40f1251"}
{"level":"debug","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be49339f8069db8c0cd278b12b6cf1ee19bcbde439393e82229a56226d0c4d64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:02:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:02:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be49339f8069db8c0cd278b12b6cf1ee19bcbde439393e82229a56226d0c4d64","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be49339f8069db8c0cd278b12b6cf1ee19bcbde439393e82229a56226d0c4d64","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be49339f8069db8c0cd278b12b6cf1ee19bcbde439393e82229a56226d0c4d64","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be49339f8069db8c0cd278b12b6cf1ee19bcbde439393e82229a56226d0c4d64"}
{"level":"debug","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be49339f8069db8c0cd278b12b6cf1ee19bcbde439393e82229a56226d0c4d64","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be49339f8069db8c0cd278b12b6cf1ee19bcbde439393e82229a56226d0c4d64"}
{"level":"debug","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be49339f8069db8c0cd278b12b6cf1ee19bcbde439393e82229a56226d0c4d64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:02:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:02:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be49339f8069db8c0cd278b12b6cf1ee19bcbde439393e82229a56226d0c4d64"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be49339f8069db8c0cd278b12b6cf1ee19bcbde439393e82229a56226d0c4d64","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be49339f8069db8c0cd278b12b6cf1ee19bcbde439393e82229a56226d0c4d64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:02:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:02:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be49339f8069db8c0cd278b12b6cf1ee19bcbde439393e82229a56226d0c4d64","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be49339f8069db8c0cd278b12b6cf1ee19bcbde439393e82229a56226d0c4d64","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be49339f8069db8c0cd278b12b6cf1ee19bcbde439393e82229a56226d0c4d64","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be49339f8069db8c0cd278b12b6cf1ee19bcbde439393e82229a56226d0c4d64"}
{"level":"debug","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be49339f8069db8c0cd278b12b6cf1ee19bcbde439393e82229a56226d0c4d64","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be49339f8069db8c0cd278b12b6cf1ee19bcbde439393e82229a56226d0c4d64"}
{"level":"debug","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be49339f8069db8c0cd278b12b6cf1ee19bcbde439393e82229a56226d0c4d64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:02:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:02:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be49339f8069db8c0cd278b12b6cf1ee19bcbde439393e82229a56226d0c4d64"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be49339f8069db8c0cd278b12b6cf1ee19bcbde439393e82229a56226d0c4d64","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d921f8aba77063d1418a9ee4e75255cea811125f9a4471d9868c73d8224d73e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:02:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:02:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d921f8aba77063d1418a9ee4e75255cea811125f9a4471d9868c73d8224d73e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be49339f8069db8c0cd278b12b6cf1ee19bcbde439393e82229a56226d0c4d64","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d921f8aba77063d1418a9ee4e75255cea811125f9a4471d9868c73d8224d73e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d921f8aba77063d1418a9ee4e75255cea811125f9a4471d9868c73d8224d73e"}
{"level":"debug","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d921f8aba77063d1418a9ee4e75255cea811125f9a4471d9868c73d8224d73e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:02:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:02:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d921f8aba77063d1418a9ee4e75255cea811125f9a4471d9868c73d8224d73e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d921f8aba77063d1418a9ee4e75255cea811125f9a4471d9868c73d8224d73e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d921f8aba77063d1418a9ee4e75255cea811125f9a4471d9868c73d8224d73e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be49339f8069db8c0cd278b12b6cf1ee19bcbde439393e82229a56226d0c4d64"}
{"level":"info","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d921f8aba77063d1418a9ee4e75255cea811125f9a4471d9868c73d8224d73e"}
{"level":"debug","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ed624a874aa7c0f294ab2a9483715be4dc1cdcad2b3c258ed32437fb1a83782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:02:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:02:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ed624a874aa7c0f294ab2a9483715be4dc1cdcad2b3c258ed32437fb1a83782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ed624a874aa7c0f294ab2a9483715be4dc1cdcad2b3c258ed32437fb1a83782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ed624a874aa7c0f294ab2a9483715be4dc1cdcad2b3c258ed32437fb1a83782","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ed624a874aa7c0f294ab2a9483715be4dc1cdcad2b3c258ed32437fb1a83782"}
{"level":"debug","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ed624a874aa7c0f294ab2a9483715be4dc1cdcad2b3c258ed32437fb1a83782","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ed624a874aa7c0f294ab2a9483715be4dc1cdcad2b3c258ed32437fb1a83782"}
{"level":"debug","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ed624a874aa7c0f294ab2a9483715be4dc1cdcad2b3c258ed32437fb1a83782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:02:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:02:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ed624a874aa7c0f294ab2a9483715be4dc1cdcad2b3c258ed32437fb1a83782"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ed624a874aa7c0f294ab2a9483715be4dc1cdcad2b3c258ed32437fb1a83782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ed624a874aa7c0f294ab2a9483715be4dc1cdcad2b3c258ed32437fb1a83782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:02:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:02:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ed624a874aa7c0f294ab2a9483715be4dc1cdcad2b3c258ed32437fb1a83782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ed624a874aa7c0f294ab2a9483715be4dc1cdcad2b3c258ed32437fb1a83782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ed624a874aa7c0f294ab2a9483715be4dc1cdcad2b3c258ed32437fb1a83782","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ed624a874aa7c0f294ab2a9483715be4dc1cdcad2b3c258ed32437fb1a83782"}
{"level":"debug","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ed624a874aa7c0f294ab2a9483715be4dc1cdcad2b3c258ed32437fb1a83782","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ed624a874aa7c0f294ab2a9483715be4dc1cdcad2b3c258ed32437fb1a83782"}
{"level":"debug","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ed624a874aa7c0f294ab2a9483715be4dc1cdcad2b3c258ed32437fb1a83782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:02:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:02:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ed624a874aa7c0f294ab2a9483715be4dc1cdcad2b3c258ed32437fb1a83782"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ed624a874aa7c0f294ab2a9483715be4dc1cdcad2b3c258ed32437fb1a83782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ed624a874aa7c0f294ab2a9483715be4dc1cdcad2b3c258ed32437fb1a83782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae17ca9c3d067a9de65e2a23c989471a225f5bcdb0b583e97634c25a15346b59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:02:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:02:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ed624a874aa7c0f294ab2a9483715be4dc1cdcad2b3c258ed32437fb1a83782"}
{"level":"info","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae17ca9c3d067a9de65e2a23c989471a225f5bcdb0b583e97634c25a15346b59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae17ca9c3d067a9de65e2a23c989471a225f5bcdb0b583e97634c25a15346b59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:02:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:02:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae17ca9c3d067a9de65e2a23c989471a225f5bcdb0b583e97634c25a15346b59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae17ca9c3d067a9de65e2a23c989471a225f5bcdb0b583e97634c25a15346b59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:02:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:02:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae17ca9c3d067a9de65e2a23c989471a225f5bcdb0b583e97634c25a15346b59"}
{"level":"error","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ae17ca9c3d067a9de65e2a23c989471a225f5bcdb0b583e97634c25a15346b59","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ae17ca9c3d067a9de65e2a23c989471a225f5bcdb0b583e97634c25a15346b59\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae17ca9c3d067a9de65e2a23c989471a225f5bcdb0b583e97634c25a15346b59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae17ca9c3d067a9de65e2a23c989471a225f5bcdb0b583e97634c25a15346b59","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae17ca9c3d067a9de65e2a23c989471a225f5bcdb0b583e97634c25a15346b59"}
{"level":"debug","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea8a1160e0b7405fa77a255818c2d461717fcf5c706783747a9472d0791a8933","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:02:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:02:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea8a1160e0b7405fa77a255818c2d461717fcf5c706783747a9472d0791a8933","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea8a1160e0b7405fa77a255818c2d461717fcf5c706783747a9472d0791a8933","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:02:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:02:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea8a1160e0b7405fa77a255818c2d461717fcf5c706783747a9472d0791a8933"}
{"level":"info","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea8a1160e0b7405fa77a255818c2d461717fcf5c706783747a9472d0791a8933","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae17ca9c3d067a9de65e2a23c989471a225f5bcdb0b583e97634c25a15346b59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:02:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:02:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae17ca9c3d067a9de65e2a23c989471a225f5bcdb0b583e97634c25a15346b59"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea8a1160e0b7405fa77a255818c2d461717fcf5c706783747a9472d0791a8933"}
{"level":"info","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae17ca9c3d067a9de65e2a23c989471a225f5bcdb0b583e97634c25a15346b59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea8a1160e0b7405fa77a255818c2d461717fcf5c706783747a9472d0791a8933","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae17ca9c3d067a9de65e2a23c989471a225f5bcdb0b583e97634c25a15346b59","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea8a1160e0b7405fa77a255818c2d461717fcf5c706783747a9472d0791a8933"}
{"level":"debug","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea8a1160e0b7405fa77a255818c2d461717fcf5c706783747a9472d0791a8933","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:02:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:02:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea8a1160e0b7405fa77a255818c2d461717fcf5c706783747a9472d0791a8933"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae17ca9c3d067a9de65e2a23c989471a225f5bcdb0b583e97634c25a15346b59"}
{"level":"info","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea8a1160e0b7405fa77a255818c2d461717fcf5c706783747a9472d0791a8933","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea8a1160e0b7405fa77a255818c2d461717fcf5c706783747a9472d0791a8933","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb71e97c9f20e5386fd2d3ca675dbba8052e2b77de0a9864d9f25ab00415953d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:02:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:02:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea8a1160e0b7405fa77a255818c2d461717fcf5c706783747a9472d0791a8933"}
{"level":"info","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb71e97c9f20e5386fd2d3ca675dbba8052e2b77de0a9864d9f25ab00415953d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb71e97c9f20e5386fd2d3ca675dbba8052e2b77de0a9864d9f25ab00415953d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:02:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:02:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb71e97c9f20e5386fd2d3ca675dbba8052e2b77de0a9864d9f25ab00415953d"}
{"level":"info","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb71e97c9f20e5386fd2d3ca675dbba8052e2b77de0a9864d9f25ab00415953d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb71e97c9f20e5386fd2d3ca675dbba8052e2b77de0a9864d9f25ab00415953d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:02:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:02:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb71e97c9f20e5386fd2d3ca675dbba8052e2b77de0a9864d9f25ab00415953d"}
{"level":"error","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"eb71e97c9f20e5386fd2d3ca675dbba8052e2b77de0a9864d9f25ab00415953d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"eb71e97c9f20e5386fd2d3ca675dbba8052e2b77de0a9864d9f25ab00415953d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb71e97c9f20e5386fd2d3ca675dbba8052e2b77de0a9864d9f25ab00415953d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb71e97c9f20e5386fd2d3ca675dbba8052e2b77de0a9864d9f25ab00415953d"}
{"level":"debug","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb71e97c9f20e5386fd2d3ca675dbba8052e2b77de0a9864d9f25ab00415953d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:02:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:02:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb71e97c9f20e5386fd2d3ca675dbba8052e2b77de0a9864d9f25ab00415953d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb71e97c9f20e5386fd2d3ca675dbba8052e2b77de0a9864d9f25ab00415953d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1338eeefbd57e3a1a325cc121f9b24d31aff591ac8048978bc4e14c6dee19b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:02:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:02:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1338eeefbd57e3a1a325cc121f9b24d31aff591ac8048978bc4e14c6dee19b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb71e97c9f20e5386fd2d3ca675dbba8052e2b77de0a9864d9f25ab00415953d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1338eeefbd57e3a1a325cc121f9b24d31aff591ac8048978bc4e14c6dee19b3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1338eeefbd57e3a1a325cc121f9b24d31aff591ac8048978bc4e14c6dee19b3"}
{"level":"debug","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1338eeefbd57e3a1a325cc121f9b24d31aff591ac8048978bc4e14c6dee19b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:02:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:02:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1338eeefbd57e3a1a325cc121f9b24d31aff591ac8048978bc4e14c6dee19b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1338eeefbd57e3a1a325cc121f9b24d31aff591ac8048978bc4e14c6dee19b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1338eeefbd57e3a1a325cc121f9b24d31aff591ac8048978bc4e14c6dee19b3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb71e97c9f20e5386fd2d3ca675dbba8052e2b77de0a9864d9f25ab00415953d"}
{"level":"info","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1338eeefbd57e3a1a325cc121f9b24d31aff591ac8048978bc4e14c6dee19b3"}
{"level":"debug","ts":"2026-07-12T17:03:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ad62af8d9ee34a2581185c374677188874f92016ead4bf32729c9fc9917fab3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:03:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ad62af8d9ee34a2581185c374677188874f92016ead4bf32729c9fc9917fab3"}
{"level":"debug","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:03:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:03:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc"}
{"level":"debug","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc"}
{"level":"debug","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:03:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:03:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:03:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:03:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc"}
{"level":"debug","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc"}
{"level":"debug","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:03:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:03:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:03:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:03:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c71fb8a3fcb5ea40768671362679a17b840b8b2d467c46421d9681683705d454","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc"}
{"level":"debug","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:03:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:03:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c71fb8a3fcb5ea40768671362679a17b840b8b2d467c46421d9681683705d454"}
{"level":"info","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:03:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:03:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc"}
{"level":"info","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc"}
{"level":"debug","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc"}
{"level":"debug","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:03:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:03:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc"}
{"level":"debug","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ed7eb2cc166d88133af26c95c5b5bf3a78c10f192c422b1c0d5637d53be7fc0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ed7eb2cc166d88133af26c95c5b5bf3a78c10f192c422b1c0d5637d53be7fc0"}
{"level":"debug","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d921f8aba77063d1418a9ee4e75255cea811125f9a4471d9868c73d8224d73e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d921f8aba77063d1418a9ee4e75255cea811125f9a4471d9868c73d8224d73e"}
{"level":"debug","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cde92dd7726d79f7bd551b9e7763c74ee5b8a1b8410d89a303259049c0839ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:03:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:03:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cde92dd7726d79f7bd551b9e7763c74ee5b8a1b8410d89a303259049c0839ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cde92dd7726d79f7bd551b9e7763c74ee5b8a1b8410d89a303259049c0839ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cde92dd7726d79f7bd551b9e7763c74ee5b8a1b8410d89a303259049c0839ec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cde92dd7726d79f7bd551b9e7763c74ee5b8a1b8410d89a303259049c0839ec"}
{"level":"debug","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cde92dd7726d79f7bd551b9e7763c74ee5b8a1b8410d89a303259049c0839ec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cde92dd7726d79f7bd551b9e7763c74ee5b8a1b8410d89a303259049c0839ec"}
{"level":"debug","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cde92dd7726d79f7bd551b9e7763c74ee5b8a1b8410d89a303259049c0839ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:03:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:03:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5cde92dd7726d79f7bd551b9e7763c74ee5b8a1b8410d89a303259049c0839ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cde92dd7726d79f7bd551b9e7763c74ee5b8a1b8410d89a303259049c0839ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cde92dd7726d79f7bd551b9e7763c74ee5b8a1b8410d89a303259049c0839ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:03:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:03:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cde92dd7726d79f7bd551b9e7763c74ee5b8a1b8410d89a303259049c0839ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad434f64c9b7289ecf311bc3c1a7eccfe5074a5763f02eabad7edf9e9ef53955","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cde92dd7726d79f7bd551b9e7763c74ee5b8a1b8410d89a303259049c0839ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cde92dd7726d79f7bd551b9e7763c74ee5b8a1b8410d89a303259049c0839ec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cde92dd7726d79f7bd551b9e7763c74ee5b8a1b8410d89a303259049c0839ec"}
{"level":"debug","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cde92dd7726d79f7bd551b9e7763c74ee5b8a1b8410d89a303259049c0839ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:03:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:03:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5cde92dd7726d79f7bd551b9e7763c74ee5b8a1b8410d89a303259049c0839ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad434f64c9b7289ecf311bc3c1a7eccfe5074a5763f02eabad7edf9e9ef53955"}
{"level":"info","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cde92dd7726d79f7bd551b9e7763c74ee5b8a1b8410d89a303259049c0839ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cde92dd7726d79f7bd551b9e7763c74ee5b8a1b8410d89a303259049c0839ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:03:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:03:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cde92dd7726d79f7bd551b9e7763c74ee5b8a1b8410d89a303259049c0839ec"}
{"level":"info","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cde92dd7726d79f7bd551b9e7763c74ee5b8a1b8410d89a303259049c0839ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cde92dd7726d79f7bd551b9e7763c74ee5b8a1b8410d89a303259049c0839ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cde92dd7726d79f7bd551b9e7763c74ee5b8a1b8410d89a303259049c0839ec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cde92dd7726d79f7bd551b9e7763c74ee5b8a1b8410d89a303259049c0839ec"}
{"level":"debug","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cde92dd7726d79f7bd551b9e7763c74ee5b8a1b8410d89a303259049c0839ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8c13dd4cef55aff21482ed92f666342ccf51fc9866e6cdccc63499736e5c9c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cde92dd7726d79f7bd551b9e7763c74ee5b8a1b8410d89a303259049c0839ec"}
{"level":"debug","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cde92dd7726d79f7bd551b9e7763c74ee5b8a1b8410d89a303259049c0839ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:03:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:03:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5cde92dd7726d79f7bd551b9e7763c74ee5b8a1b8410d89a303259049c0839ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cde92dd7726d79f7bd551b9e7763c74ee5b8a1b8410d89a303259049c0839ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cde92dd7726d79f7bd551b9e7763c74ee5b8a1b8410d89a303259049c0839ec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8c13dd4cef55aff21482ed92f666342ccf51fc9866e6cdccc63499736e5c9c7"}
{"level":"info","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cde92dd7726d79f7bd551b9e7763c74ee5b8a1b8410d89a303259049c0839ec"}
{"level":"debug","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb71e97c9f20e5386fd2d3ca675dbba8052e2b77de0a9864d9f25ab00415953d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:03:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:03:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb71e97c9f20e5386fd2d3ca675dbba8052e2b77de0a9864d9f25ab00415953d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb71e97c9f20e5386fd2d3ca675dbba8052e2b77de0a9864d9f25ab00415953d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e943e0125d86596b11aacd89865bc3d2ed7cdfff73ed42379f502f3f4c898bcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb71e97c9f20e5386fd2d3ca675dbba8052e2b77de0a9864d9f25ab00415953d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb71e97c9f20e5386fd2d3ca675dbba8052e2b77de0a9864d9f25ab00415953d"}
{"level":"debug","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae17ca9c3d067a9de65e2a23c989471a225f5bcdb0b583e97634c25a15346b59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb71e97c9f20e5386fd2d3ca675dbba8052e2b77de0a9864d9f25ab00415953d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:03:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:03:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb71e97c9f20e5386fd2d3ca675dbba8052e2b77de0a9864d9f25ab00415953d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e943e0125d86596b11aacd89865bc3d2ed7cdfff73ed42379f502f3f4c898bcd"}
{"level":"info","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb71e97c9f20e5386fd2d3ca675dbba8052e2b77de0a9864d9f25ab00415953d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21b4063652b2b6e8273bd559b265630af813c94436c3b696fb085e2d95e554a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb71e97c9f20e5386fd2d3ca675dbba8052e2b77de0a9864d9f25ab00415953d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:03:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:03:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb71e97c9f20e5386fd2d3ca675dbba8052e2b77de0a9864d9f25ab00415953d"}
{"level":"info","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb71e97c9f20e5386fd2d3ca675dbba8052e2b77de0a9864d9f25ab00415953d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb71e97c9f20e5386fd2d3ca675dbba8052e2b77de0a9864d9f25ab00415953d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:03:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:03:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb71e97c9f20e5386fd2d3ca675dbba8052e2b77de0a9864d9f25ab00415953d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb71e97c9f20e5386fd2d3ca675dbba8052e2b77de0a9864d9f25ab00415953d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb71e97c9f20e5386fd2d3ca675dbba8052e2b77de0a9864d9f25ab00415953d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:03:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:03:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb71e97c9f20e5386fd2d3ca675dbba8052e2b77de0a9864d9f25ab00415953d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae17ca9c3d067a9de65e2a23c989471a225f5bcdb0b583e97634c25a15346b59"}
{"level":"error","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"eb71e97c9f20e5386fd2d3ca675dbba8052e2b77de0a9864d9f25ab00415953d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"eb71e97c9f20e5386fd2d3ca675dbba8052e2b77de0a9864d9f25ab00415953d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb71e97c9f20e5386fd2d3ca675dbba8052e2b77de0a9864d9f25ab00415953d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb71e97c9f20e5386fd2d3ca675dbba8052e2b77de0a9864d9f25ab00415953d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19f827e52ebc2f6643692df7e59fab6a7e7f91b386bc3aaff0b11480aa047e8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21b4063652b2b6e8273bd559b265630af813c94436c3b696fb085e2d95e554a0"}
{"level":"debug","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b338ac32099368b91dd32f475c7f0bf5d57c8ba73b4f878b6634828537afd762","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb71e97c9f20e5386fd2d3ca675dbba8052e2b77de0a9864d9f25ab00415953d"}
{"level":"debug","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea8a1160e0b7405fa77a255818c2d461717fcf5c706783747a9472d0791a8933","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1338eeefbd57e3a1a325cc121f9b24d31aff591ac8048978bc4e14c6dee19b3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19f827e52ebc2f6643692df7e59fab6a7e7f91b386bc3aaff0b11480aa047e8b"}
{"level":"info","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b338ac32099368b91dd32f475c7f0bf5d57c8ba73b4f878b6634828537afd762"}
{"level":"info","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea8a1160e0b7405fa77a255818c2d461717fcf5c706783747a9472d0791a8933"}
{"level":"debug","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be49339f8069db8c0cd278b12b6cf1ee19bcbde439393e82229a56226d0c4d64","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1338eeefbd57e3a1a325cc121f9b24d31aff591ac8048978bc4e14c6dee19b3"}
{"level":"debug","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6b1651cd51394c97c5005e795e059183f19f0c40a01e94fc93ecf57e40f1251","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be49339f8069db8c0cd278b12b6cf1ee19bcbde439393e82229a56226d0c4d64"}
{"level":"debug","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c647ed957e63cbf54bf0e6aca624f617d50d4138ec83568d56713527a136df67","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6b1651cd51394c97c5005e795e059183f19f0c40a01e94fc93ecf57e40f1251"}
{"level":"info","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c647ed957e63cbf54bf0e6aca624f617d50d4138ec83568d56713527a136df67"}
{"level":"debug","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf7c5de8e6617d6d10695630b95082dd3a9ca7c0ff2d386881f3204203cf24be","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf7c5de8e6617d6d10695630b95082dd3a9ca7c0ff2d386881f3204203cf24be"}
{"level":"debug","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"437f16a6776137cc60ba8b73365431e51c8a343382f13d887b3eab13d939f26b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:03:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:03:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/437f16a6776137cc60ba8b73365431e51c8a343382f13d887b3eab13d939f26b"}
{"level":"info","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"437f16a6776137cc60ba8b73365431e51c8a343382f13d887b3eab13d939f26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c8c850e9c7afa7ac670bc24709b02d90c87fe26eb57daab49d417d5471b5280","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:03:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:03:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c8c850e9c7afa7ac670bc24709b02d90c87fe26eb57daab49d417d5471b5280"}
{"level":"info","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c8c850e9c7afa7ac670bc24709b02d90c87fe26eb57daab49d417d5471b5280","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"437f16a6776137cc60ba8b73365431e51c8a343382f13d887b3eab13d939f26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c8c850e9c7afa7ac670bc24709b02d90c87fe26eb57daab49d417d5471b5280","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:03:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:03:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c8c850e9c7afa7ac670bc24709b02d90c87fe26eb57daab49d417d5471b5280"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c8c850e9c7afa7ac670bc24709b02d90c87fe26eb57daab49d417d5471b5280","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e5a55606479a9452f103cb5fb40857ac0ad805336d83bbdfec7e599c9b3e724","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"437f16a6776137cc60ba8b73365431e51c8a343382f13d887b3eab13d939f26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c8c850e9c7afa7ac670bc24709b02d90c87fe26eb57daab49d417d5471b5280","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:03:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:03:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c8c850e9c7afa7ac670bc24709b02d90c87fe26eb57daab49d417d5471b5280"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/437f16a6776137cc60ba8b73365431e51c8a343382f13d887b3eab13d939f26b"}
{"level":"error","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3c8c850e9c7afa7ac670bc24709b02d90c87fe26eb57daab49d417d5471b5280","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3c8c850e9c7afa7ac670bc24709b02d90c87fe26eb57daab49d417d5471b5280\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ed624a874aa7c0f294ab2a9483715be4dc1cdcad2b3c258ed32437fb1a83782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c8c850e9c7afa7ac670bc24709b02d90c87fe26eb57daab49d417d5471b5280","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:03:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:03:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c8c850e9c7afa7ac670bc24709b02d90c87fe26eb57daab49d417d5471b5280","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"437f16a6776137cc60ba8b73365431e51c8a343382f13d887b3eab13d939f26b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:03:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:03:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["437f16a6776137cc60ba8b73365431e51c8a343382f13d887b3eab13d939f26b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c8c850e9c7afa7ac670bc24709b02d90c87fe26eb57daab49d417d5471b5280"}
{"level":"info","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"437f16a6776137cc60ba8b73365431e51c8a343382f13d887b3eab13d939f26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c8c850e9c7afa7ac670bc24709b02d90c87fe26eb57daab49d417d5471b5280","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:03:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:03:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c8c850e9c7afa7ac670bc24709b02d90c87fe26eb57daab49d417d5471b5280"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e5a55606479a9452f103cb5fb40857ac0ad805336d83bbdfec7e599c9b3e724"}
{"level":"info","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c8c850e9c7afa7ac670bc24709b02d90c87fe26eb57daab49d417d5471b5280","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"437f16a6776137cc60ba8b73365431e51c8a343382f13d887b3eab13d939f26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c8c850e9c7afa7ac670bc24709b02d90c87fe26eb57daab49d417d5471b5280","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ed624a874aa7c0f294ab2a9483715be4dc1cdcad2b3c258ed32437fb1a83782"}
{"level":"info","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c8c850e9c7afa7ac670bc24709b02d90c87fe26eb57daab49d417d5471b5280"}
{"level":"info","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/437f16a6776137cc60ba8b73365431e51c8a343382f13d887b3eab13d939f26b"}
{"level":"info","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7ded9c98-ed07-42fb-9c3b-39ae88470b72","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45280","PortSpecifier":{"PortValue":45280}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7ded9c98-ed07-42fb-9c3b-39ae88470b72","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-17d27e.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7ded9c98-ed07-42fb-9c3b-39ae88470b72","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45280","PortSpecifier":{"PortValue":45280}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783875789,"nanos":186174096},"http":{"id":"7ded9c98-ed07-42fb-9c3b-39ae88470b72","method":"POST","headers":{":authority":"e2e-shared-a-17d27e.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7ded9c98-ed07-42fb-9c3b-39ae88470b72","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7ded9c98-ed07-42fb-9c3b-39ae88470b72","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3a471a63-af50-485e-8497-6203c5d354e5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=dd8475e3-e7a1-48e6-b180-67063e5b71ec"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bbc8f098c53"]}}
{"level":"debug","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7ded9c98-ed07-42fb-9c3b-39ae88470b72","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bbc8f098c53"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=dd8475e3-e7a1-48e6-b180-67063e5b71ec"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3a471a63-af50-485e-8497-6203c5d354e5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1e5a55606479a9452f103cb5fb40857ac0ad805336d83bbdfec7e599c9b3e724"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.31:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-17d27e.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ded9c98-ed07-42fb-9c3b-39ae88470b72","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ded9c98-ed07-42fb-9c3b-39ae88470b72","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ded9c98-ed07-42fb-9c3b-39ae88470b72","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-17d27e/rate-test-model-17d27e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7ded9c98-ed07-42fb-9c3b-39ae88470b72","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ded9c98-ed07-42fb-9c3b-39ae88470b72","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ded9c98-ed07-42fb-9c3b-39ae88470b72","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7ded9c98-ed07-42fb-9c3b-39ae88470b72","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7ded9c98-ed07-42fb-9c3b-39ae88470b72","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a4b0763f-58d4-43d8-935e-15f203d1ab9c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60246","PortSpecifier":{"PortValue":60246}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a4b0763f-58d4-43d8-935e-15f203d1ab9c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-cc457c.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a4b0763f-58d4-43d8-935e-15f203d1ab9c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60246","PortSpecifier":{"PortValue":60246}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783875789,"nanos":244853077},"http":{"id":"a4b0763f-58d4-43d8-935e-15f203d1ab9c","method":"POST","headers":{":authority":"e2e-shared-b-cc457c.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a4b0763f-58d4-43d8-935e-15f203d1ab9c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a4b0763f-58d4-43d8-935e-15f203d1ab9c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3a471a63-af50-485e-8497-6203c5d354e5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=dd8475e3-e7a1-48e6-b180-67063e5b71ec"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bbc8f098c53"]}}
{"level":"debug","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a4b0763f-58d4-43d8-935e-15f203d1ab9c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bbc8f098c53"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=dd8475e3-e7a1-48e6-b180-67063e5b71ec"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3a471a63-af50-485e-8497-6203c5d354e5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0ad62af8d9ee34a2581185c374677188874f92016ead4bf32729c9fc9917fab3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-cc457c.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a4b0763f-58d4-43d8-935e-15f203d1ab9c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a4b0763f-58d4-43d8-935e-15f203d1ab9c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a4b0763f-58d4-43d8-935e-15f203d1ab9c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-cc457c/rate-test-model-cc457c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a4b0763f-58d4-43d8-935e-15f203d1ab9c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a4b0763f-58d4-43d8-935e-15f203d1ab9c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a4b0763f-58d4-43d8-935e-15f203d1ab9c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a4b0763f-58d4-43d8-935e-15f203d1ab9c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a4b0763f-58d4-43d8-935e-15f203d1ab9c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3f387e19-0607-433f-be06-92bc52486f0e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45294","PortSpecifier":{"PortValue":45294}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3f387e19-0607-433f-be06-92bc52486f0e","method":"POST","path":"/ai-tenant-e2e-shared-a-17d27e/rate-test-model-17d27e/v1/completions","host":"e2e-shared-a-17d27e.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3f387e19-0607-433f-be06-92bc52486f0e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45294","PortSpecifier":{"PortValue":45294}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783875789,"nanos":288417766},"http":{"id":"3f387e19-0607-433f-be06-92bc52486f0e","method":"POST","headers":{":authority":"e2e-shared-a-17d27e.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-17d27e/rate-test-model-17d27e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3f387e19-0607-433f-be06-92bc52486f0e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ZjMfYaBXPpm5csU9_IfIStYmtSnYs8A87qvw55JD3aDkG6QfDgeXD971KGqg"}
{"level":"debug","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3f387e19-0607-433f-be06-92bc52486f0e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-17d27e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ZjMfYaBXPpm5csU9_IfIStYmtSnYs8A87qvw55JD3aDkG6QfDgeXD971KGqg\"}"}
{"level":"debug","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3f387e19-0607-433f-be06-92bc52486f0e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-17d27e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cda6f9fe-cdc8-4d28-8eff-6b94a3f1b155","keyName":"e2e-rate-a-ad1a0c","subscription":"e2e-rate-iso-a-ad1a0c","tenant":"e2e-shared-a-17d27e","userId":"cda6f9fe-cdc8-4d28-8eff-6b94a3f1b155","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3f387e19-0607-433f-be06-92bc52486f0e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-17d27e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-17d27e/rate-test-model-17d27e\",\"requestedSubscription\":\"e2e-rate-iso-a-ad1a0c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3f387e19-0607-433f-be06-92bc52486f0e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-17d27e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-17d27e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ad1a0c","namespace":"ai-tenant-e2e-shared-a-17d27e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3f387e19-0607-433f-be06-92bc52486f0e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f387e19-0607-433f-be06-92bc52486f0e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f387e19-0607-433f-be06-92bc52486f0e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f387e19-0607-433f-be06-92bc52486f0e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f387e19-0607-433f-be06-92bc52486f0e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-17d27e/rate-test-model-17d27e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f387e19-0607-433f-be06-92bc52486f0e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f387e19-0607-433f-be06-92bc52486f0e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f387e19-0607-433f-be06-92bc52486f0e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ad1a0c"}
{"level":"debug","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f387e19-0607-433f-be06-92bc52486f0e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"cda6f9fe-cdc8-4d28-8eff-6b94a3f1b155","keyName":"e2e-rate-a-ad1a0c","selected_subscription":"e2e-rate-iso-a-ad1a0c","selected_subscription_key":"ai-tenant-e2e-shared-a-17d27e/e2e-rate-iso-a-ad1a0c@ai-tenant-e2e-shared-a-17d27e/rate-test-model-17d27e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-17d27e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ad1a0c","namespace":"ai-tenant-e2e-shared-a-17d27e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3f387e19-0607-433f-be06-92bc52486f0e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3f387e19-0607-433f-be06-92bc52486f0e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:03:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8bba0b0-90d4-4f71-b4e8-c31d73a30dc6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45306","PortSpecifier":{"PortValue":45306}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c8bba0b0-90d4-4f71-b4e8-c31d73a30dc6","method":"POST","path":"/ai-tenant-e2e-shared-a-17d27e/rate-test-model-17d27e/v1/completions","host":"e2e-shared-a-17d27e.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:03:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8bba0b0-90d4-4f71-b4e8-c31d73a30dc6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45306","PortSpecifier":{"PortValue":45306}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783875790,"nanos":353267410},"http":{"id":"c8bba0b0-90d4-4f71-b4e8-c31d73a30dc6","method":"POST","headers":{":authority":"e2e-shared-a-17d27e.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-17d27e/rate-test-model-17d27e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:03:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c8bba0b0-90d4-4f71-b4e8-c31d73a30dc6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ZjMfYaBXPpm5csU9_IfIStYmtSnYs8A87qvw55JD3aDkG6QfDgeXD971KGqg"}
{"level":"debug","ts":"2026-07-12T17:03:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c8bba0b0-90d4-4f71-b4e8-c31d73a30dc6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-17d27e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ZjMfYaBXPpm5csU9_IfIStYmtSnYs8A87qvw55JD3aDkG6QfDgeXD971KGqg\"}"}
{"level":"debug","ts":"2026-07-12T17:03:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c8bba0b0-90d4-4f71-b4e8-c31d73a30dc6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-17d27e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cda6f9fe-cdc8-4d28-8eff-6b94a3f1b155","keyName":"e2e-rate-a-ad1a0c","subscription":"e2e-rate-iso-a-ad1a0c","tenant":"e2e-shared-a-17d27e","userId":"cda6f9fe-cdc8-4d28-8eff-6b94a3f1b155","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-12T17:03:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c8bba0b0-90d4-4f71-b4e8-c31d73a30dc6","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-17d27e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-17d27e/rate-test-model-17d27e\",\"requestedSubscription\":\"e2e-rate-iso-a-ad1a0c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-12T17:03:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c8bba0b0-90d4-4f71-b4e8-c31d73a30dc6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-17d27e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-17d27e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ad1a0c","namespace":"ai-tenant-e2e-shared-a-17d27e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-12T17:03:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c8bba0b0-90d4-4f71-b4e8-c31d73a30dc6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:03:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8bba0b0-90d4-4f71-b4e8-c31d73a30dc6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:03:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8bba0b0-90d4-4f71-b4e8-c31d73a30dc6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:03:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8bba0b0-90d4-4f71-b4e8-c31d73a30dc6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:03:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8bba0b0-90d4-4f71-b4e8-c31d73a30dc6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-17d27e/rate-test-model-17d27e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:03:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8bba0b0-90d4-4f71-b4e8-c31d73a30dc6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T17:03:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8bba0b0-90d4-4f71-b4e8-c31d73a30dc6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-12T17:03:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8bba0b0-90d4-4f71-b4e8-c31d73a30dc6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ad1a0c"}
{"level":"debug","ts":"2026-07-12T17:03:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8bba0b0-90d4-4f71-b4e8-c31d73a30dc6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"cda6f9fe-cdc8-4d28-8eff-6b94a3f1b155","keyName":"e2e-rate-a-ad1a0c","selected_subscription":"e2e-rate-iso-a-ad1a0c","selected_subscription_key":"ai-tenant-e2e-shared-a-17d27e/e2e-rate-iso-a-ad1a0c@ai-tenant-e2e-shared-a-17d27e/rate-test-model-17d27e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-17d27e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ad1a0c","namespace":"ai-tenant-e2e-shared-a-17d27e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-12T17:03:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8bba0b0-90d4-4f71-b4e8-c31d73a30dc6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:03:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8bba0b0-90d4-4f71-b4e8-c31d73a30dc6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:03:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6f8c4c5c-f743-4d92-8325-8bf7860c6004","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45308","PortSpecifier":{"PortValue":45308}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6f8c4c5c-f743-4d92-8325-8bf7860c6004","method":"POST","path":"/ai-tenant-e2e-shared-a-17d27e/rate-test-model-17d27e/v1/completions","host":"e2e-shared-a-17d27e.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:03:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6f8c4c5c-f743-4d92-8325-8bf7860c6004","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45308","PortSpecifier":{"PortValue":45308}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783875791,"nanos":393536508},"http":{"id":"6f8c4c5c-f743-4d92-8325-8bf7860c6004","method":"POST","headers":{":authority":"e2e-shared-a-17d27e.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-17d27e/rate-test-model-17d27e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:03:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6f8c4c5c-f743-4d92-8325-8bf7860c6004","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ZjMfYaBXPpm5csU9_IfIStYmtSnYs8A87qvw55JD3aDkG6QfDgeXD971KGqg"}
{"level":"debug","ts":"2026-07-12T17:03:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6f8c4c5c-f743-4d92-8325-8bf7860c6004","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-17d27e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ZjMfYaBXPpm5csU9_IfIStYmtSnYs8A87qvw55JD3aDkG6QfDgeXD971KGqg\"}"}
{"level":"debug","ts":"2026-07-12T17:03:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6f8c4c5c-f743-4d92-8325-8bf7860c6004","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-17d27e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cda6f9fe-cdc8-4d28-8eff-6b94a3f1b155","keyName":"e2e-rate-a-ad1a0c","subscription":"e2e-rate-iso-a-ad1a0c","tenant":"e2e-shared-a-17d27e","userId":"cda6f9fe-cdc8-4d28-8eff-6b94a3f1b155","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-12T17:03:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6f8c4c5c-f743-4d92-8325-8bf7860c6004","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-17d27e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-17d27e/rate-test-model-17d27e\",\"requestedSubscription\":\"e2e-rate-iso-a-ad1a0c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-12T17:03:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6f8c4c5c-f743-4d92-8325-8bf7860c6004","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-17d27e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-17d27e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ad1a0c","namespace":"ai-tenant-e2e-shared-a-17d27e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-12T17:03:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6f8c4c5c-f743-4d92-8325-8bf7860c6004","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:03:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f8c4c5c-f743-4d92-8325-8bf7860c6004","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:03:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f8c4c5c-f743-4d92-8325-8bf7860c6004","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:03:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f8c4c5c-f743-4d92-8325-8bf7860c6004","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:03:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f8c4c5c-f743-4d92-8325-8bf7860c6004","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-17d27e/rate-test-model-17d27e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:03:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6f8c4c5c-f743-4d92-8325-8bf7860c6004","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T17:03:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6f8c4c5c-f743-4d92-8325-8bf7860c6004","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ad1a0c"}
{"level":"debug","ts":"2026-07-12T17:03:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6f8c4c5c-f743-4d92-8325-8bf7860c6004","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-12T17:03:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6f8c4c5c-f743-4d92-8325-8bf7860c6004","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"cda6f9fe-cdc8-4d28-8eff-6b94a3f1b155","keyName":"e2e-rate-a-ad1a0c","selected_subscription":"e2e-rate-iso-a-ad1a0c","selected_subscription_key":"ai-tenant-e2e-shared-a-17d27e/e2e-rate-iso-a-ad1a0c@ai-tenant-e2e-shared-a-17d27e/rate-test-model-17d27e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-17d27e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ad1a0c","namespace":"ai-tenant-e2e-shared-a-17d27e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-12T17:03:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6f8c4c5c-f743-4d92-8325-8bf7860c6004","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:03:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6f8c4c5c-f743-4d92-8325-8bf7860c6004","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2928be6a-942d-4e75-ba84-18a7ceb14533","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:38594","PortSpecifier":{"PortValue":38594}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2928be6a-942d-4e75-ba84-18a7ceb14533","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-17d27e.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2928be6a-942d-4e75-ba84-18a7ceb14533","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:38594","PortSpecifier":{"PortValue":38594}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783875804,"nanos":533962612},"http":{"id":"2928be6a-942d-4e75-ba84-18a7ceb14533","method":"POST","headers":{":authority":"e2e-shared-a-17d27e.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2928be6a-942d-4e75-ba84-18a7ceb14533","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2928be6a-942d-4e75-ba84-18a7ceb14533","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3a471a63-af50-485e-8497-6203c5d354e5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=dd8475e3-e7a1-48e6-b180-67063e5b71ec"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bbc8f098c53"]}}
{"level":"debug","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2928be6a-942d-4e75-ba84-18a7ceb14533","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bbc8f098c53"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=dd8475e3-e7a1-48e6-b180-67063e5b71ec"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3a471a63-af50-485e-8497-6203c5d354e5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1e5a55606479a9452f103cb5fb40857ac0ad805336d83bbdfec7e599c9b3e724"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.31:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-17d27e.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2928be6a-942d-4e75-ba84-18a7ceb14533","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2928be6a-942d-4e75-ba84-18a7ceb14533","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2928be6a-942d-4e75-ba84-18a7ceb14533","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-17d27e/rate-test-model-17d27e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2928be6a-942d-4e75-ba84-18a7ceb14533","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2928be6a-942d-4e75-ba84-18a7ceb14533","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2928be6a-942d-4e75-ba84-18a7ceb14533","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2928be6a-942d-4e75-ba84-18a7ceb14533","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2928be6a-942d-4e75-ba84-18a7ceb14533","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bb6b3329-ced6-4633-b356-865b20b0e924","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:42184","PortSpecifier":{"PortValue":42184}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bb6b3329-ced6-4633-b356-865b20b0e924","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-cc457c.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bb6b3329-ced6-4633-b356-865b20b0e924","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:42184","PortSpecifier":{"PortValue":42184}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783875804,"nanos":577567878},"http":{"id":"bb6b3329-ced6-4633-b356-865b20b0e924","method":"POST","headers":{":authority":"e2e-shared-b-cc457c.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bb6b3329-ced6-4633-b356-865b20b0e924","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bb6b3329-ced6-4633-b356-865b20b0e924","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3a471a63-af50-485e-8497-6203c5d354e5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=dd8475e3-e7a1-48e6-b180-67063e5b71ec"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bbc8f098c53"]}}
{"level":"debug","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bb6b3329-ced6-4633-b356-865b20b0e924","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bbc8f098c53"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=dd8475e3-e7a1-48e6-b180-67063e5b71ec"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3a471a63-af50-485e-8497-6203c5d354e5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0ad62af8d9ee34a2581185c374677188874f92016ead4bf32729c9fc9917fab3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-cc457c.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb6b3329-ced6-4633-b356-865b20b0e924","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb6b3329-ced6-4633-b356-865b20b0e924","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb6b3329-ced6-4633-b356-865b20b0e924","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-cc457c/rate-test-model-cc457c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bb6b3329-ced6-4633-b356-865b20b0e924","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb6b3329-ced6-4633-b356-865b20b0e924","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb6b3329-ced6-4633-b356-865b20b0e924","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bb6b3329-ced6-4633-b356-865b20b0e924","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bb6b3329-ced6-4633-b356-865b20b0e924","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"55998cf5-4e45-4049-a13f-fcd7f95acfeb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:38604","PortSpecifier":{"PortValue":38604}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"55998cf5-4e45-4049-a13f-fcd7f95acfeb","method":"POST","path":"/ai-tenant-e2e-shared-a-17d27e/rate-test-model-17d27e/v1/completions","host":"e2e-shared-a-17d27e.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"55998cf5-4e45-4049-a13f-fcd7f95acfeb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:38604","PortSpecifier":{"PortValue":38604}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783875804,"nanos":618192168},"http":{"id":"55998cf5-4e45-4049-a13f-fcd7f95acfeb","method":"POST","headers":{":authority":"e2e-shared-a-17d27e.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-17d27e/rate-test-model-17d27e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"55998cf5-4e45-4049-a13f-fcd7f95acfeb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-p4TxlHgtyn1OsDOK_PGGvwvFeys6Yl4wXtjZh0kNAQmdpcoXy8mMDFkxSjsP"}
{"level":"debug","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"55998cf5-4e45-4049-a13f-fcd7f95acfeb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-17d27e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-p4TxlHgtyn1OsDOK_PGGvwvFeys6Yl4wXtjZh0kNAQmdpcoXy8mMDFkxSjsP\"}"}
{"level":"debug","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"55998cf5-4e45-4049-a13f-fcd7f95acfeb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-17d27e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e4a98b3c-b451-4f9c-9e86-4487c369c82d","keyName":"e2e-rate-a-642024","subscription":"e2e-rate-iso-a-642024","tenant":"e2e-shared-a-17d27e","userId":"e4a98b3c-b451-4f9c-9e86-4487c369c82d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"55998cf5-4e45-4049-a13f-fcd7f95acfeb","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-17d27e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-17d27e/rate-test-model-17d27e\",\"requestedSubscription\":\"e2e-rate-iso-a-642024\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"55998cf5-4e45-4049-a13f-fcd7f95acfeb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-17d27e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-17d27e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-642024","namespace":"ai-tenant-e2e-shared-a-17d27e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"55998cf5-4e45-4049-a13f-fcd7f95acfeb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"55998cf5-4e45-4049-a13f-fcd7f95acfeb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"55998cf5-4e45-4049-a13f-fcd7f95acfeb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"55998cf5-4e45-4049-a13f-fcd7f95acfeb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"55998cf5-4e45-4049-a13f-fcd7f95acfeb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-17d27e/rate-test-model-17d27e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"55998cf5-4e45-4049-a13f-fcd7f95acfeb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"55998cf5-4e45-4049-a13f-fcd7f95acfeb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-642024"}
{"level":"debug","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"55998cf5-4e45-4049-a13f-fcd7f95acfeb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"55998cf5-4e45-4049-a13f-fcd7f95acfeb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e4a98b3c-b451-4f9c-9e86-4487c369c82d","keyName":"e2e-rate-a-642024","selected_subscription":"e2e-rate-iso-a-642024","selected_subscription_key":"ai-tenant-e2e-shared-a-17d27e/e2e-rate-iso-a-642024@ai-tenant-e2e-shared-a-17d27e/rate-test-model-17d27e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-17d27e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-642024","namespace":"ai-tenant-e2e-shared-a-17d27e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"55998cf5-4e45-4049-a13f-fcd7f95acfeb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"55998cf5-4e45-4049-a13f-fcd7f95acfeb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:03:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"85ef186b-a554-4ade-ae79-8f30e3c7ab2b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:38620","PortSpecifier":{"PortValue":38620}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"85ef186b-a554-4ade-ae79-8f30e3c7ab2b","method":"POST","path":"/ai-tenant-e2e-shared-a-17d27e/rate-test-model-17d27e/v1/completions","host":"e2e-shared-a-17d27e.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:03:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"85ef186b-a554-4ade-ae79-8f30e3c7ab2b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:38620","PortSpecifier":{"PortValue":38620}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783875805,"nanos":680620927},"http":{"id":"85ef186b-a554-4ade-ae79-8f30e3c7ab2b","method":"POST","headers":{":authority":"e2e-shared-a-17d27e.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-17d27e/rate-test-model-17d27e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:03:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"85ef186b-a554-4ade-ae79-8f30e3c7ab2b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-p4TxlHgtyn1OsDOK_PGGvwvFeys6Yl4wXtjZh0kNAQmdpcoXy8mMDFkxSjsP"}
{"level":"debug","ts":"2026-07-12T17:03:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"85ef186b-a554-4ade-ae79-8f30e3c7ab2b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-17d27e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-p4TxlHgtyn1OsDOK_PGGvwvFeys6Yl4wXtjZh0kNAQmdpcoXy8mMDFkxSjsP\"}"}
{"level":"debug","ts":"2026-07-12T17:03:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"85ef186b-a554-4ade-ae79-8f30e3c7ab2b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-17d27e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e4a98b3c-b451-4f9c-9e86-4487c369c82d","keyName":"e2e-rate-a-642024","subscription":"e2e-rate-iso-a-642024","tenant":"e2e-shared-a-17d27e","userId":"e4a98b3c-b451-4f9c-9e86-4487c369c82d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-12T17:03:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"85ef186b-a554-4ade-ae79-8f30e3c7ab2b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-17d27e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-17d27e/rate-test-model-17d27e\",\"requestedSubscription\":\"e2e-rate-iso-a-642024\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-12T17:03:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"85ef186b-a554-4ade-ae79-8f30e3c7ab2b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-17d27e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-17d27e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-642024","namespace":"ai-tenant-e2e-shared-a-17d27e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-12T17:03:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"85ef186b-a554-4ade-ae79-8f30e3c7ab2b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:03:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"85ef186b-a554-4ade-ae79-8f30e3c7ab2b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:03:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"85ef186b-a554-4ade-ae79-8f30e3c7ab2b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:03:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"85ef186b-a554-4ade-ae79-8f30e3c7ab2b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-17d27e/rate-test-model-17d27e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:03:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"85ef186b-a554-4ade-ae79-8f30e3c7ab2b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:03:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"85ef186b-a554-4ade-ae79-8f30e3c7ab2b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T17:03:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"85ef186b-a554-4ade-ae79-8f30e3c7ab2b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-642024"}
{"level":"debug","ts":"2026-07-12T17:03:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"85ef186b-a554-4ade-ae79-8f30e3c7ab2b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-12T17:03:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"85ef186b-a554-4ade-ae79-8f30e3c7ab2b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e4a98b3c-b451-4f9c-9e86-4487c369c82d","keyName":"e2e-rate-a-642024","selected_subscription":"e2e-rate-iso-a-642024","selected_subscription_key":"ai-tenant-e2e-shared-a-17d27e/e2e-rate-iso-a-642024@ai-tenant-e2e-shared-a-17d27e/rate-test-model-17d27e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-17d27e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-642024","namespace":"ai-tenant-e2e-shared-a-17d27e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-12T17:03:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"85ef186b-a554-4ade-ae79-8f30e3c7ab2b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:03:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"85ef186b-a554-4ade-ae79-8f30e3c7ab2b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:03:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"524d2341-430d-41e8-9f13-8ec2933839cb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:38622","PortSpecifier":{"PortValue":38622}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"524d2341-430d-41e8-9f13-8ec2933839cb","method":"POST","path":"/ai-tenant-e2e-shared-a-17d27e/rate-test-model-17d27e/v1/completions","host":"e2e-shared-a-17d27e.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:03:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"524d2341-430d-41e8-9f13-8ec2933839cb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:38622","PortSpecifier":{"PortValue":38622}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783875806,"nanos":727772451},"http":{"id":"524d2341-430d-41e8-9f13-8ec2933839cb","method":"POST","headers":{":authority":"e2e-shared-a-17d27e.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-17d27e/rate-test-model-17d27e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:03:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"524d2341-430d-41e8-9f13-8ec2933839cb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-p4TxlHgtyn1OsDOK_PGGvwvFeys6Yl4wXtjZh0kNAQmdpcoXy8mMDFkxSjsP"}
{"level":"debug","ts":"2026-07-12T17:03:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"524d2341-430d-41e8-9f13-8ec2933839cb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-17d27e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-p4TxlHgtyn1OsDOK_PGGvwvFeys6Yl4wXtjZh0kNAQmdpcoXy8mMDFkxSjsP\"}"}
{"level":"debug","ts":"2026-07-12T17:03:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"524d2341-430d-41e8-9f13-8ec2933839cb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-17d27e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e4a98b3c-b451-4f9c-9e86-4487c369c82d","keyName":"e2e-rate-a-642024","subscription":"e2e-rate-iso-a-642024","tenant":"e2e-shared-a-17d27e","userId":"e4a98b3c-b451-4f9c-9e86-4487c369c82d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-12T17:03:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"524d2341-430d-41e8-9f13-8ec2933839cb","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-17d27e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-17d27e/rate-test-model-17d27e\",\"requestedSubscription\":\"e2e-rate-iso-a-642024\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-12T17:03:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"524d2341-430d-41e8-9f13-8ec2933839cb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-17d27e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-17d27e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-642024","namespace":"ai-tenant-e2e-shared-a-17d27e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-12T17:03:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"524d2341-430d-41e8-9f13-8ec2933839cb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:03:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"524d2341-430d-41e8-9f13-8ec2933839cb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:03:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"524d2341-430d-41e8-9f13-8ec2933839cb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:03:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"524d2341-430d-41e8-9f13-8ec2933839cb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-17d27e/rate-test-model-17d27e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:03:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"524d2341-430d-41e8-9f13-8ec2933839cb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:03:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"524d2341-430d-41e8-9f13-8ec2933839cb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-12T17:03:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"524d2341-430d-41e8-9f13-8ec2933839cb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-642024"}
{"level":"debug","ts":"2026-07-12T17:03:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"524d2341-430d-41e8-9f13-8ec2933839cb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T17:03:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"524d2341-430d-41e8-9f13-8ec2933839cb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e4a98b3c-b451-4f9c-9e86-4487c369c82d","keyName":"e2e-rate-a-642024","selected_subscription":"e2e-rate-iso-a-642024","selected_subscription_key":"ai-tenant-e2e-shared-a-17d27e/e2e-rate-iso-a-642024@ai-tenant-e2e-shared-a-17d27e/rate-test-model-17d27e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-17d27e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-642024","namespace":"ai-tenant-e2e-shared-a-17d27e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-12T17:03:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"524d2341-430d-41e8-9f13-8ec2933839cb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:03:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"524d2341-430d-41e8-9f13-8ec2933839cb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:03:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fcc84d12-2160-48f7-85a5-7b1a21317b99","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:42198","PortSpecifier":{"PortValue":42198}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fcc84d12-2160-48f7-85a5-7b1a21317b99","method":"POST","path":"/ai-tenant-e2e-shared-b-cc457c/rate-test-model-cc457c/v1/completions","host":"e2e-shared-b-cc457c.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:03:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fcc84d12-2160-48f7-85a5-7b1a21317b99","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:42198","PortSpecifier":{"PortValue":42198}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783875806,"nanos":764111825},"http":{"id":"fcc84d12-2160-48f7-85a5-7b1a21317b99","method":"POST","headers":{":authority":"e2e-shared-b-cc457c.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-cc457c/rate-test-model-cc457c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:03:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fcc84d12-2160-48f7-85a5-7b1a21317b99","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-2FmJRSAF0Ylk7iLr_sRw3oOm9wbKgeN7wonhAEoCrQxugJMbWytynxVbTTCe"}
{"level":"debug","ts":"2026-07-12T17:03:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fcc84d12-2160-48f7-85a5-7b1a21317b99","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-cc457c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-2FmJRSAF0Ylk7iLr_sRw3oOm9wbKgeN7wonhAEoCrQxugJMbWytynxVbTTCe\"}"}
{"level":"debug","ts":"2026-07-12T17:03:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fcc84d12-2160-48f7-85a5-7b1a21317b99","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-cc457c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"55c074f9-b427-4fed-9783-23b62ab0bf36","keyName":"e2e-rate-b-642024","subscription":"e2e-rate-iso-b-642024","tenant":"e2e-shared-b-cc457c","userId":"55c074f9-b427-4fed-9783-23b62ab0bf36","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-12T17:03:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fcc84d12-2160-48f7-85a5-7b1a21317b99","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-cc457c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-cc457c/rate-test-model-cc457c\",\"requestedSubscription\":\"e2e-rate-iso-b-642024\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-12T17:03:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fcc84d12-2160-48f7-85a5-7b1a21317b99","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-cc457c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-cc457c","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-642024","namespace":"ai-tenant-e2e-shared-b-cc457c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-12T17:03:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fcc84d12-2160-48f7-85a5-7b1a21317b99","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:03:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fcc84d12-2160-48f7-85a5-7b1a21317b99","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:03:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fcc84d12-2160-48f7-85a5-7b1a21317b99","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:03:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fcc84d12-2160-48f7-85a5-7b1a21317b99","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:03:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fcc84d12-2160-48f7-85a5-7b1a21317b99","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-cc457c/rate-test-model-cc457c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:03:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fcc84d12-2160-48f7-85a5-7b1a21317b99","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T17:03:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fcc84d12-2160-48f7-85a5-7b1a21317b99","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-642024"}
{"level":"debug","ts":"2026-07-12T17:03:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fcc84d12-2160-48f7-85a5-7b1a21317b99","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-12T17:03:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fcc84d12-2160-48f7-85a5-7b1a21317b99","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"55c074f9-b427-4fed-9783-23b62ab0bf36","keyName":"e2e-rate-b-642024","selected_subscription":"e2e-rate-iso-b-642024","selected_subscription_key":"ai-tenant-e2e-shared-b-cc457c/e2e-rate-iso-b-642024@ai-tenant-e2e-shared-b-cc457c/rate-test-model-cc457c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-cc457c","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-642024","namespace":"ai-tenant-e2e-shared-b-cc457c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-12T17:03:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fcc84d12-2160-48f7-85a5-7b1a21317b99","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:03:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fcc84d12-2160-48f7-85a5-7b1a21317b99","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/21b4063652b2b6e8273bd559b265630af813c94436c3b696fb085e2d95e554a0"}
{"level":"info","ts":"2026-07-12T17:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9ed7eb2cc166d88133af26c95c5b5bf3a78c10f192c422b1c0d5637d53be7fc0"}
{"level":"info","ts":"2026-07-12T17:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc"}
{"level":"info","ts":"2026-07-12T17:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f8c13dd4cef55aff21482ed92f666342ccf51fc9866e6cdccc63499736e5c9c7"}
{"level":"info","ts":"2026-07-12T17:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c647ed957e63cbf54bf0e6aca624f617d50d4138ec83568d56713527a136df67"}
{"level":"info","ts":"2026-07-12T17:03:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cf7c5de8e6617d6d10695630b95082dd3a9ca7c0ff2d386881f3204203cf24be"}
{"level":"info","ts":"2026-07-12T17:03:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b338ac32099368b91dd32f475c7f0bf5d57c8ba73b4f878b6634828537afd762"}
{"level":"info","ts":"2026-07-12T17:03:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c8c850e9c7afa7ac670bc24709b02d90c87fe26eb57daab49d417d5471b5280"}
{"level":"info","ts":"2026-07-12T17:03:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3d921f8aba77063d1418a9ee4e75255cea811125f9a4471d9868c73d8224d73e"}
{"level":"info","ts":"2026-07-12T17:03:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b6b1651cd51394c97c5005e795e059183f19f0c40a01e94fc93ecf57e40f1251"}
{"level":"info","ts":"2026-07-12T17:03:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a1338eeefbd57e3a1a325cc121f9b24d31aff591ac8048978bc4e14c6dee19b3"}
{"level":"info","ts":"2026-07-12T17:03:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eb71e97c9f20e5386fd2d3ca675dbba8052e2b77de0a9864d9f25ab00415953d"}
{"level":"info","ts":"2026-07-12T17:03:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ea8a1160e0b7405fa77a255818c2d461717fcf5c706783747a9472d0791a8933"}
{"level":"info","ts":"2026-07-12T17:03:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ae17ca9c3d067a9de65e2a23c989471a225f5bcdb0b583e97634c25a15346b59"}
{"level":"info","ts":"2026-07-12T17:03:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/be49339f8069db8c0cd278b12b6cf1ee19bcbde439393e82229a56226d0c4d64"}
{"level":"info","ts":"2026-07-12T17:03:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2ed624a874aa7c0f294ab2a9483715be4dc1cdcad2b3c258ed32437fb1a83782"}
{"level":"info","ts":"2026-07-12T17:03:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e943e0125d86596b11aacd89865bc3d2ed7cdfff73ed42379f502f3f4c898bcd"}
{"level":"info","ts":"2026-07-12T17:03:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ad434f64c9b7289ecf311bc3c1a7eccfe5074a5763f02eabad7edf9e9ef53955"}
{"level":"info","ts":"2026-07-12T17:03:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1e5a55606479a9452f103cb5fb40857ac0ad805336d83bbdfec7e599c9b3e724"}
{"level":"info","ts":"2026-07-12T17:03:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/437f16a6776137cc60ba8b73365431e51c8a343382f13d887b3eab13d939f26b"}
{"level":"info","ts":"2026-07-12T17:04:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/19f827e52ebc2f6643692df7e59fab6a7e7f91b386bc3aaff0b11480aa047e8b"}
{"level":"info","ts":"2026-07-12T17:04:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c71fb8a3fcb5ea40768671362679a17b840b8b2d467c46421d9681683705d454"}
{"level":"info","ts":"2026-07-12T17:04:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5cde92dd7726d79f7bd551b9e7763c74ee5b8a1b8410d89a303259049c0839ec"}
{"level":"info","ts":"2026-07-12T17:04:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0ad62af8d9ee34a2581185c374677188874f92016ead4bf32729c9fc9917fab3"}