--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"debug","ts":"2026-07-09T04:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b63865ad8e821d3762d1f6c8a099c280dff83929b25a523fcaa2115c2297cfe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:29:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:29:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b63865ad8e821d3762d1f6c8a099c280dff83929b25a523fcaa2115c2297cfe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1a792a0d0ef190dc2d24d4c37ce5a01bdafad979a56b53c49a2342ed8f2531b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:29:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:29:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c1a792a0d0ef190dc2d24d4c37ce5a01bdafad979a56b53c49a2342ed8f2531b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b63865ad8e821d3762d1f6c8a099c280dff83929b25a523fcaa2115c2297cfe"} {"level":"info","ts":"2026-07-09T04:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1a792a0d0ef190dc2d24d4c37ce5a01bdafad979a56b53c49a2342ed8f2531b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b63865ad8e821d3762d1f6c8a099c280dff83929b25a523fcaa2115c2297cfe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:29:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:29:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b63865ad8e821d3762d1f6c8a099c280dff83929b25a523fcaa2115c2297cfe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1a792a0d0ef190dc2d24d4c37ce5a01bdafad979a56b53c49a2342ed8f2531b"} {"level":"info","ts":"2026-07-09T04:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b63865ad8e821d3762d1f6c8a099c280dff83929b25a523fcaa2115c2297cfe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1a792a0d0ef190dc2d24d4c37ce5a01bdafad979a56b53c49a2342ed8f2531b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b63865ad8e821d3762d1f6c8a099c280dff83929b25a523fcaa2115c2297cfe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:29:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:29:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b63865ad8e821d3762d1f6c8a099c280dff83929b25a523fcaa2115c2297cfe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b63865ad8e821d3762d1f6c8a099c280dff83929b25a523fcaa2115c2297cfe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b63865ad8e821d3762d1f6c8a099c280dff83929b25a523fcaa2115c2297cfe"} {"level":"debug","ts":"2026-07-09T04:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b63865ad8e821d3762d1f6c8a099c280dff83929b25a523fcaa2115c2297cfe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:29:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:29:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b63865ad8e821d3762d1f6c8a099c280dff83929b25a523fcaa2115c2297cfe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b63865ad8e821d3762d1f6c8a099c280dff83929b25a523fcaa2115c2297cfe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b63865ad8e821d3762d1f6c8a099c280dff83929b25a523fcaa2115c2297cfe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"381e194d25496c53ea6cd9c1937943c880f1fb630a516e6b1465ae0454a7c536","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:29:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:29:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1a792a0d0ef190dc2d24d4c37ce5a01bdafad979a56b53c49a2342ed8f2531b"} {"level":"info","ts":"2026-07-09T04:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"381e194d25496c53ea6cd9c1937943c880f1fb630a516e6b1465ae0454a7c536","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"381e194d25496c53ea6cd9c1937943c880f1fb630a516e6b1465ae0454a7c536","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"381e194d25496c53ea6cd9c1937943c880f1fb630a516e6b1465ae0454a7c536","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b63865ad8e821d3762d1f6c8a099c280dff83929b25a523fcaa2115c2297cfe"} {"level":"debug","ts":"2026-07-09T04:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"381e194d25496c53ea6cd9c1937943c880f1fb630a516e6b1465ae0454a7c536","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:29:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:29:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"381e194d25496c53ea6cd9c1937943c880f1fb630a516e6b1465ae0454a7c536","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"381e194d25496c53ea6cd9c1937943c880f1fb630a516e6b1465ae0454a7c536","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/381e194d25496c53ea6cd9c1937943c880f1fb630a516e6b1465ae0454a7c536"} {"level":"debug","ts":"2026-07-09T04:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"381e194d25496c53ea6cd9c1937943c880f1fb630a516e6b1465ae0454a7c536","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/381e194d25496c53ea6cd9c1937943c880f1fb630a516e6b1465ae0454a7c536"} {"level":"debug","ts":"2026-07-09T04:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"381e194d25496c53ea6cd9c1937943c880f1fb630a516e6b1465ae0454a7c536","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:29:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:29:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["381e194d25496c53ea6cd9c1937943c880f1fb630a516e6b1465ae0454a7c536"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"381e194d25496c53ea6cd9c1937943c880f1fb630a516e6b1465ae0454a7c536","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"381e194d25496c53ea6cd9c1937943c880f1fb630a516e6b1465ae0454a7c536","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:29:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:29:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"381e194d25496c53ea6cd9c1937943c880f1fb630a516e6b1465ae0454a7c536","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"381e194d25496c53ea6cd9c1937943c880f1fb630a516e6b1465ae0454a7c536","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"381e194d25496c53ea6cd9c1937943c880f1fb630a516e6b1465ae0454a7c536","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/381e194d25496c53ea6cd9c1937943c880f1fb630a516e6b1465ae0454a7c536"} {"level":"debug","ts":"2026-07-09T04:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"381e194d25496c53ea6cd9c1937943c880f1fb630a516e6b1465ae0454a7c536","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/381e194d25496c53ea6cd9c1937943c880f1fb630a516e6b1465ae0454a7c536"} {"level":"debug","ts":"2026-07-09T04:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"381e194d25496c53ea6cd9c1937943c880f1fb630a516e6b1465ae0454a7c536","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:29:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:29:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["381e194d25496c53ea6cd9c1937943c880f1fb630a516e6b1465ae0454a7c536"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"381e194d25496c53ea6cd9c1937943c880f1fb630a516e6b1465ae0454a7c536","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:29:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"381e194d25496c53ea6cd9c1937943c880f1fb630a516e6b1465ae0454a7c536","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:29:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/381e194d25496c53ea6cd9c1937943c880f1fb630a516e6b1465ae0454a7c536"} {"level":"info","ts":"2026-07-09T04:29:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/827708e00197c0e02fab77c53cd4a99e6d969c0135c896e0792e30108f366016"} {"level":"info","ts":"2026-07-09T04:29:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bd0fe1d648937c069540cd1103569fdfc1361131868d6ead2a11ccd4c57b9e51"} {"level":"info","ts":"2026-07-09T04:29:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a7e899383a28228ef22248c0f235d4f5d071ebf1f53084b2ab0a7c32d97fd337"} {"level":"info","ts":"2026-07-09T04:29:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0f505fe466d1858096207bd6a00a87ba347081a92bedbfea2f452441fa9f82b8"} {"level":"info","ts":"2026-07-09T04:29:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/381e194d25496c53ea6cd9c1937943c880f1fb630a516e6b1465ae0454a7c536"} {"level":"info","ts":"2026-07-09T04:29:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c1a792a0d0ef190dc2d24d4c37ce5a01bdafad979a56b53c49a2342ed8f2531b"} {"level":"info","ts":"2026-07-09T04:29:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3ba1340251aed564de852681b7a1130bfabb06609b7e8415d2387c90503870ab"} {"level":"info","ts":"2026-07-09T04:29:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4b63865ad8e821d3762d1f6c8a099c280dff83929b25a523fcaa2115c2297cfe"} {"level":"debug","ts":"2026-07-09T04:31:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd72d769e3263a282ce6f15b1ca8c8023adaab7a9088c8b364e6e4eb93689301","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:31:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:31:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd72d769e3263a282ce6f15b1ca8c8023adaab7a9088c8b364e6e4eb93689301","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd72d769e3263a282ce6f15b1ca8c8023adaab7a9088c8b364e6e4eb93689301","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:31:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd72d769e3263a282ce6f15b1ca8c8023adaab7a9088c8b364e6e4eb93689301"} {"level":"debug","ts":"2026-07-09T04:31:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd72d769e3263a282ce6f15b1ca8c8023adaab7a9088c8b364e6e4eb93689301","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd72d769e3263a282ce6f15b1ca8c8023adaab7a9088c8b364e6e4eb93689301","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:31:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd72d769e3263a282ce6f15b1ca8c8023adaab7a9088c8b364e6e4eb93689301"} {"level":"debug","ts":"2026-07-09T04:31:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd72d769e3263a282ce6f15b1ca8c8023adaab7a9088c8b364e6e4eb93689301","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:31:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:31:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd72d769e3263a282ce6f15b1ca8c8023adaab7a9088c8b364e6e4eb93689301"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd72d769e3263a282ce6f15b1ca8c8023adaab7a9088c8b364e6e4eb93689301","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:31:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:31:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd72d769e3263a282ce6f15b1ca8c8023adaab7a9088c8b364e6e4eb93689301","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:31:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3"} {"level":"debug","ts":"2026-07-09T04:31:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:31:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:31:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd72d769e3263a282ce6f15b1ca8c8023adaab7a9088c8b364e6e4eb93689301"} {"level":"info","ts":"2026-07-09T04:31:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:31:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:31:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:31:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3"} {"level":"debug","ts":"2026-07-09T04:31:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:31:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3"} {"level":"debug","ts":"2026-07-09T04:31:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:31:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:31:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:31:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:31:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:31:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3"} {"level":"debug","ts":"2026-07-09T04:31:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:31:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3"} {"level":"debug","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:31:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:31:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3"} {"level":"debug","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a23b614c4ed3582fe582bc875d4b8fb19fbda0bcdd02fa60bc291bbfb99f19c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:31:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:31:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a23b614c4ed3582fe582bc875d4b8fb19fbda0bcdd02fa60bc291bbfb99f19c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a23b614c4ed3582fe582bc875d4b8fb19fbda0bcdd02fa60bc291bbfb99f19c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:31:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:31:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a23b614c4ed3582fe582bc875d4b8fb19fbda0bcdd02fa60bc291bbfb99f19c8"} {"level":"info","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a23b614c4ed3582fe582bc875d4b8fb19fbda0bcdd02fa60bc291bbfb99f19c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a23b614c4ed3582fe582bc875d4b8fb19fbda0bcdd02fa60bc291bbfb99f19c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:31:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:31:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a23b614c4ed3582fe582bc875d4b8fb19fbda0bcdd02fa60bc291bbfb99f19c8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a23b614c4ed3582fe582bc875d4b8fb19fbda0bcdd02fa60bc291bbfb99f19c8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a23b614c4ed3582fe582bc875d4b8fb19fbda0bcdd02fa60bc291bbfb99f19c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a23b614c4ed3582fe582bc875d4b8fb19fbda0bcdd02fa60bc291bbfb99f19c8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a23b614c4ed3582fe582bc875d4b8fb19fbda0bcdd02fa60bc291bbfb99f19c8"} {"level":"info","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a23b614c4ed3582fe582bc875d4b8fb19fbda0bcdd02fa60bc291bbfb99f19c8"} {"level":"debug","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0efe2b4768a44f8324e865b5777735eaabae17774e28c67ace4220c24847f863","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:31:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:31:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0efe2b4768a44f8324e865b5777735eaabae17774e28c67ace4220c24847f863","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a23b614c4ed3582fe582bc875d4b8fb19fbda0bcdd02fa60bc291bbfb99f19c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:31:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:31:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a23b614c4ed3582fe582bc875d4b8fb19fbda0bcdd02fa60bc291bbfb99f19c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0efe2b4768a44f8324e865b5777735eaabae17774e28c67ace4220c24847f863"} {"level":"info","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a23b614c4ed3582fe582bc875d4b8fb19fbda0bcdd02fa60bc291bbfb99f19c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0efe2b4768a44f8324e865b5777735eaabae17774e28c67ace4220c24847f863","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a23b614c4ed3582fe582bc875d4b8fb19fbda0bcdd02fa60bc291bbfb99f19c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0efe2b4768a44f8324e865b5777735eaabae17774e28c67ace4220c24847f863","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0efe2b4768a44f8324e865b5777735eaabae17774e28c67ace4220c24847f863"} {"level":"debug","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0efe2b4768a44f8324e865b5777735eaabae17774e28c67ace4220c24847f863","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:31:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:31:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0efe2b4768a44f8324e865b5777735eaabae17774e28c67ace4220c24847f863"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a23b614c4ed3582fe582bc875d4b8fb19fbda0bcdd02fa60bc291bbfb99f19c8"} {"level":"info","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0efe2b4768a44f8324e865b5777735eaabae17774e28c67ace4220c24847f863","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0efe2b4768a44f8324e865b5777735eaabae17774e28c67ace4220c24847f863","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0efe2b4768a44f8324e865b5777735eaabae17774e28c67ace4220c24847f863"} {"level":"debug","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad2337102b41b40104d58bf95d0cbd5130ad7c042b49fdc7d672ff5634613e8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:31:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:31:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad2337102b41b40104d58bf95d0cbd5130ad7c042b49fdc7d672ff5634613e8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad2337102b41b40104d58bf95d0cbd5130ad7c042b49fdc7d672ff5634613e8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:31:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:31:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad2337102b41b40104d58bf95d0cbd5130ad7c042b49fdc7d672ff5634613e8d"} {"level":"info","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad2337102b41b40104d58bf95d0cbd5130ad7c042b49fdc7d672ff5634613e8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad2337102b41b40104d58bf95d0cbd5130ad7c042b49fdc7d672ff5634613e8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:31:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:31:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ad2337102b41b40104d58bf95d0cbd5130ad7c042b49fdc7d672ff5634613e8d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ad2337102b41b40104d58bf95d0cbd5130ad7c042b49fdc7d672ff5634613e8d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad2337102b41b40104d58bf95d0cbd5130ad7c042b49fdc7d672ff5634613e8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad2337102b41b40104d58bf95d0cbd5130ad7c042b49fdc7d672ff5634613e8d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad2337102b41b40104d58bf95d0cbd5130ad7c042b49fdc7d672ff5634613e8d"} {"level":"info","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad2337102b41b40104d58bf95d0cbd5130ad7c042b49fdc7d672ff5634613e8d"} {"level":"debug","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad2337102b41b40104d58bf95d0cbd5130ad7c042b49fdc7d672ff5634613e8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:31:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:31:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad2337102b41b40104d58bf95d0cbd5130ad7c042b49fdc7d672ff5634613e8d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad2337102b41b40104d58bf95d0cbd5130ad7c042b49fdc7d672ff5634613e8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad2337102b41b40104d58bf95d0cbd5130ad7c042b49fdc7d672ff5634613e8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:31:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:31:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad2337102b41b40104d58bf95d0cbd5130ad7c042b49fdc7d672ff5634613e8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad2337102b41b40104d58bf95d0cbd5130ad7c042b49fdc7d672ff5634613e8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad2337102b41b40104d58bf95d0cbd5130ad7c042b49fdc7d672ff5634613e8d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad2337102b41b40104d58bf95d0cbd5130ad7c042b49fdc7d672ff5634613e8d"} {"level":"debug","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad2337102b41b40104d58bf95d0cbd5130ad7c042b49fdc7d672ff5634613e8d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad2337102b41b40104d58bf95d0cbd5130ad7c042b49fdc7d672ff5634613e8d"} {"level":"debug","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d5229e4fb78bb477f9161a49af9b62231c07bfb60f302d29591820d4c1ddf08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:31:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:31:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d5229e4fb78bb477f9161a49af9b62231c07bfb60f302d29591820d4c1ddf08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d5229e4fb78bb477f9161a49af9b62231c07bfb60f302d29591820d4c1ddf08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d5229e4fb78bb477f9161a49af9b62231c07bfb60f302d29591820d4c1ddf08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad2337102b41b40104d58bf95d0cbd5130ad7c042b49fdc7d672ff5634613e8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:31:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:31:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad2337102b41b40104d58bf95d0cbd5130ad7c042b49fdc7d672ff5634613e8d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d5229e4fb78bb477f9161a49af9b62231c07bfb60f302d29591820d4c1ddf08"} {"level":"info","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad2337102b41b40104d58bf95d0cbd5130ad7c042b49fdc7d672ff5634613e8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad2337102b41b40104d58bf95d0cbd5130ad7c042b49fdc7d672ff5634613e8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d5229e4fb78bb477f9161a49af9b62231c07bfb60f302d29591820d4c1ddf08","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d5229e4fb78bb477f9161a49af9b62231c07bfb60f302d29591820d4c1ddf08"} {"level":"info","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad2337102b41b40104d58bf95d0cbd5130ad7c042b49fdc7d672ff5634613e8d"} {"level":"debug","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d5229e4fb78bb477f9161a49af9b62231c07bfb60f302d29591820d4c1ddf08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:31:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:31:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d5229e4fb78bb477f9161a49af9b62231c07bfb60f302d29591820d4c1ddf08"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d5229e4fb78bb477f9161a49af9b62231c07bfb60f302d29591820d4c1ddf08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d5229e4fb78bb477f9161a49af9b62231c07bfb60f302d29591820d4c1ddf08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:31:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:31:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d5229e4fb78bb477f9161a49af9b62231c07bfb60f302d29591820d4c1ddf08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eaea011717ca297d05abe1282ff777328741e47c2cabd5b9f3deca8cb36741c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:31:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:31:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d5229e4fb78bb477f9161a49af9b62231c07bfb60f302d29591820d4c1ddf08"} {"level":"info","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eaea011717ca297d05abe1282ff777328741e47c2cabd5b9f3deca8cb36741c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d5229e4fb78bb477f9161a49af9b62231c07bfb60f302d29591820d4c1ddf08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:31:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:31:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d5229e4fb78bb477f9161a49af9b62231c07bfb60f302d29591820d4c1ddf08"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d5229e4fb78bb477f9161a49af9b62231c07bfb60f302d29591820d4c1ddf08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8a4cce062019ee170976857b7bacd8b27d3447839fd6db4bc1b77c415c9c16a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:31:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:31:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eaea011717ca297d05abe1282ff777328741e47c2cabd5b9f3deca8cb36741c6"} {"level":"info","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8a4cce062019ee170976857b7bacd8b27d3447839fd6db4bc1b77c415c9c16a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eaea011717ca297d05abe1282ff777328741e47c2cabd5b9f3deca8cb36741c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:31:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:31:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eaea011717ca297d05abe1282ff777328741e47c2cabd5b9f3deca8cb36741c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eaea011717ca297d05abe1282ff777328741e47c2cabd5b9f3deca8cb36741c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b0a2b074404259ae826e42e1a82fbd5924dea7b1e5afd0ab8b8081917880e9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:31:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:31:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8a4cce062019ee170976857b7bacd8b27d3447839fd6db4bc1b77c415c9c16a"} {"level":"info","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b0a2b074404259ae826e42e1a82fbd5924dea7b1e5afd0ab8b8081917880e9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d5229e4fb78bb477f9161a49af9b62231c07bfb60f302d29591820d4c1ddf08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:31:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:31:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d5229e4fb78bb477f9161a49af9b62231c07bfb60f302d29591820d4c1ddf08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8a4cce062019ee170976857b7bacd8b27d3447839fd6db4bc1b77c415c9c16a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:31:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:31:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a8a4cce062019ee170976857b7bacd8b27d3447839fd6db4bc1b77c415c9c16a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d5229e4fb78bb477f9161a49af9b62231c07bfb60f302d29591820d4c1ddf08"} {"level":"info","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8a4cce062019ee170976857b7bacd8b27d3447839fd6db4bc1b77c415c9c16a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eaea011717ca297d05abe1282ff777328741e47c2cabd5b9f3deca8cb36741c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b0a2b074404259ae826e42e1a82fbd5924dea7b1e5afd0ab8b8081917880e9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:31:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:31:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b0a2b074404259ae826e42e1a82fbd5924dea7b1e5afd0ab8b8081917880e9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d5229e4fb78bb477f9161a49af9b62231c07bfb60f302d29591820d4c1ddf08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:31:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:31:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d5229e4fb78bb477f9161a49af9b62231c07bfb60f302d29591820d4c1ddf08"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d5229e4fb78bb477f9161a49af9b62231c07bfb60f302d29591820d4c1ddf08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21b11fe79d598ce0eeace7300f3fff02e0904a04f3442ce66e25f87995124f1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:31:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:31:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b0a2b074404259ae826e42e1a82fbd5924dea7b1e5afd0ab8b8081917880e9d"} {"level":"info","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21b11fe79d598ce0eeace7300f3fff02e0904a04f3442ce66e25f87995124f1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8a4cce062019ee170976857b7bacd8b27d3447839fd6db4bc1b77c415c9c16a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"612f0e59eaa946bed08167944b6a1337d80eb7abb318e135637bd7ba3d75e9d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:31:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:31:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"612f0e59eaa946bed08167944b6a1337d80eb7abb318e135637bd7ba3d75e9d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b0a2b074404259ae826e42e1a82fbd5924dea7b1e5afd0ab8b8081917880e9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:31:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:31:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b0a2b074404259ae826e42e1a82fbd5924dea7b1e5afd0ab8b8081917880e9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eaea011717ca297d05abe1282ff777328741e47c2cabd5b9f3deca8cb36741c6"} {"level":"info","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b0a2b074404259ae826e42e1a82fbd5924dea7b1e5afd0ab8b8081917880e9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d5229e4fb78bb477f9161a49af9b62231c07bfb60f302d29591820d4c1ddf08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21b11fe79d598ce0eeace7300f3fff02e0904a04f3442ce66e25f87995124f1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"612f0e59eaa946bed08167944b6a1337d80eb7abb318e135637bd7ba3d75e9d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b0a2b074404259ae826e42e1a82fbd5924dea7b1e5afd0ab8b8081917880e9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba3d5b894488ac784ff66c1cf64a769a8d5742899f35b5816830941790a3bfcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:31:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:31:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8a4cce062019ee170976857b7bacd8b27d3447839fd6db4bc1b77c415c9c16a"} {"level":"info","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba3d5b894488ac784ff66c1cf64a769a8d5742899f35b5816830941790a3bfcd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21b11fe79d598ce0eeace7300f3fff02e0904a04f3442ce66e25f87995124f1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:31:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:31:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21b11fe79d598ce0eeace7300f3fff02e0904a04f3442ce66e25f87995124f1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"612f0e59eaa946bed08167944b6a1337d80eb7abb318e135637bd7ba3d75e9d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba3d5b894488ac784ff66c1cf64a769a8d5742899f35b5816830941790a3bfcd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21b11fe79d598ce0eeace7300f3fff02e0904a04f3442ce66e25f87995124f1f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21b11fe79d598ce0eeace7300f3fff02e0904a04f3442ce66e25f87995124f1f"} {"level":"debug","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba3d5b894488ac784ff66c1cf64a769a8d5742899f35b5816830941790a3bfcd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21b11fe79d598ce0eeace7300f3fff02e0904a04f3442ce66e25f87995124f1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:31:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:31:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["21b11fe79d598ce0eeace7300f3fff02e0904a04f3442ce66e25f87995124f1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d5229e4fb78bb477f9161a49af9b62231c07bfb60f302d29591820d4c1ddf08"} {"level":"info","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21b11fe79d598ce0eeace7300f3fff02e0904a04f3442ce66e25f87995124f1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"612f0e59eaa946bed08167944b6a1337d80eb7abb318e135637bd7ba3d75e9d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:31:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:31:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"612f0e59eaa946bed08167944b6a1337d80eb7abb318e135637bd7ba3d75e9d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba3d5b894488ac784ff66c1cf64a769a8d5742899f35b5816830941790a3bfcd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21b11fe79d598ce0eeace7300f3fff02e0904a04f3442ce66e25f87995124f1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"612f0e59eaa946bed08167944b6a1337d80eb7abb318e135637bd7ba3d75e9d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/612f0e59eaa946bed08167944b6a1337d80eb7abb318e135637bd7ba3d75e9d3"} {"level":"info","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b0a2b074404259ae826e42e1a82fbd5924dea7b1e5afd0ab8b8081917880e9d"} {"level":"debug","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"612f0e59eaa946bed08167944b6a1337d80eb7abb318e135637bd7ba3d75e9d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:31:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:31:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["612f0e59eaa946bed08167944b6a1337d80eb7abb318e135637bd7ba3d75e9d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba3d5b894488ac784ff66c1cf64a769a8d5742899f35b5816830941790a3bfcd"} {"level":"info","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"612f0e59eaa946bed08167944b6a1337d80eb7abb318e135637bd7ba3d75e9d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba3d5b894488ac784ff66c1cf64a769a8d5742899f35b5816830941790a3bfcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:31:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:31:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba3d5b894488ac784ff66c1cf64a769a8d5742899f35b5816830941790a3bfcd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba3d5b894488ac784ff66c1cf64a769a8d5742899f35b5816830941790a3bfcd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"612f0e59eaa946bed08167944b6a1337d80eb7abb318e135637bd7ba3d75e9d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba3d5b894488ac784ff66c1cf64a769a8d5742899f35b5816830941790a3bfcd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21b11fe79d598ce0eeace7300f3fff02e0904a04f3442ce66e25f87995124f1f"} {"level":"info","ts":"2026-07-09T04:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/612f0e59eaa946bed08167944b6a1337d80eb7abb318e135637bd7ba3d75e9d3"} {"level":"info","ts":"2026-07-09T04:31:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba3d5b894488ac784ff66c1cf64a769a8d5742899f35b5816830941790a3bfcd"} {"level":"debug","ts":"2026-07-09T04:31:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f0d28f1bd520107ccff686e1c71cef42ab65201f89b937ae2c2e189f963403c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:31:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:31:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f0d28f1bd520107ccff686e1c71cef42ab65201f89b937ae2c2e189f963403c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f0d28f1bd520107ccff686e1c71cef42ab65201f89b937ae2c2e189f963403c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:31:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:31:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f0d28f1bd520107ccff686e1c71cef42ab65201f89b937ae2c2e189f963403c"} {"level":"info","ts":"2026-07-09T04:31:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f0d28f1bd520107ccff686e1c71cef42ab65201f89b937ae2c2e189f963403c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f0d28f1bd520107ccff686e1c71cef42ab65201f89b937ae2c2e189f963403c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:31:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:31:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-09T04:31:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1f0d28f1bd520107ccff686e1c71cef42ab65201f89b937ae2c2e189f963403c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1f0d28f1bd520107ccff686e1c71cef42ab65201f89b937ae2c2e189f963403c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-09T04:31:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f0d28f1bd520107ccff686e1c71cef42ab65201f89b937ae2c2e189f963403c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f0d28f1bd520107ccff686e1c71cef42ab65201f89b937ae2c2e189f963403c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:31:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f0d28f1bd520107ccff686e1c71cef42ab65201f89b937ae2c2e189f963403c"} {"level":"info","ts":"2026-07-09T04:31:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f0d28f1bd520107ccff686e1c71cef42ab65201f89b937ae2c2e189f963403c"} {"level":"debug","ts":"2026-07-09T04:31:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5be12b9fc485c506a85c1050d7b618faf8e73a8463fed9ef5f938fd8959b6a42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:31:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:31:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5be12b9fc485c506a85c1050d7b618faf8e73a8463fed9ef5f938fd8959b6a42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5be12b9fc485c506a85c1050d7b618faf8e73a8463fed9ef5f938fd8959b6a42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f0d28f1bd520107ccff686e1c71cef42ab65201f89b937ae2c2e189f963403c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:31:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:31:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f0d28f1bd520107ccff686e1c71cef42ab65201f89b937ae2c2e189f963403c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5be12b9fc485c506a85c1050d7b618faf8e73a8463fed9ef5f938fd8959b6a42"} {"level":"info","ts":"2026-07-09T04:31:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f0d28f1bd520107ccff686e1c71cef42ab65201f89b937ae2c2e189f963403c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5be12b9fc485c506a85c1050d7b618faf8e73a8463fed9ef5f938fd8959b6a42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f0d28f1bd520107ccff686e1c71cef42ab65201f89b937ae2c2e189f963403c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:31:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5be12b9fc485c506a85c1050d7b618faf8e73a8463fed9ef5f938fd8959b6a42"} {"level":"debug","ts":"2026-07-09T04:31:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5be12b9fc485c506a85c1050d7b618faf8e73a8463fed9ef5f938fd8959b6a42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:31:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:31:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5be12b9fc485c506a85c1050d7b618faf8e73a8463fed9ef5f938fd8959b6a42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5be12b9fc485c506a85c1050d7b618faf8e73a8463fed9ef5f938fd8959b6a42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5be12b9fc485c506a85c1050d7b618faf8e73a8463fed9ef5f938fd8959b6a42","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:31:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f0d28f1bd520107ccff686e1c71cef42ab65201f89b937ae2c2e189f963403c"} {"level":"info","ts":"2026-07-09T04:31:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5be12b9fc485c506a85c1050d7b618faf8e73a8463fed9ef5f938fd8959b6a42"} {"level":"debug","ts":"2026-07-09T04:31:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9556fbbf1482fea39f704afebd0f20f2492618ad4f2d293cad091454e6164eff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:31:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:31:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9556fbbf1482fea39f704afebd0f20f2492618ad4f2d293cad091454e6164eff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9556fbbf1482fea39f704afebd0f20f2492618ad4f2d293cad091454e6164eff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9556fbbf1482fea39f704afebd0f20f2492618ad4f2d293cad091454e6164eff","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:31:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9556fbbf1482fea39f704afebd0f20f2492618ad4f2d293cad091454e6164eff"} {"level":"debug","ts":"2026-07-09T04:31:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9556fbbf1482fea39f704afebd0f20f2492618ad4f2d293cad091454e6164eff","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:31:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9556fbbf1482fea39f704afebd0f20f2492618ad4f2d293cad091454e6164eff"} {"level":"debug","ts":"2026-07-09T04:31:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9556fbbf1482fea39f704afebd0f20f2492618ad4f2d293cad091454e6164eff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:31:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:31:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9556fbbf1482fea39f704afebd0f20f2492618ad4f2d293cad091454e6164eff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9556fbbf1482fea39f704afebd0f20f2492618ad4f2d293cad091454e6164eff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9556fbbf1482fea39f704afebd0f20f2492618ad4f2d293cad091454e6164eff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:31:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:31:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9556fbbf1482fea39f704afebd0f20f2492618ad4f2d293cad091454e6164eff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9556fbbf1482fea39f704afebd0f20f2492618ad4f2d293cad091454e6164eff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9556fbbf1482fea39f704afebd0f20f2492618ad4f2d293cad091454e6164eff","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:31:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9556fbbf1482fea39f704afebd0f20f2492618ad4f2d293cad091454e6164eff"} {"level":"debug","ts":"2026-07-09T04:31:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9556fbbf1482fea39f704afebd0f20f2492618ad4f2d293cad091454e6164eff","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:31:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9556fbbf1482fea39f704afebd0f20f2492618ad4f2d293cad091454e6164eff"} {"level":"debug","ts":"2026-07-09T04:31:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9556fbbf1482fea39f704afebd0f20f2492618ad4f2d293cad091454e6164eff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:31:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:31:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9556fbbf1482fea39f704afebd0f20f2492618ad4f2d293cad091454e6164eff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9556fbbf1482fea39f704afebd0f20f2492618ad4f2d293cad091454e6164eff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9556fbbf1482fea39f704afebd0f20f2492618ad4f2d293cad091454e6164eff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:31:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:31:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9556fbbf1482fea39f704afebd0f20f2492618ad4f2d293cad091454e6164eff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d4164edcb14408157ee8d9a65ea3b72ab50d9e47d50b6e6c17f0c46bd35da9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:31:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:31:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9556fbbf1482fea39f704afebd0f20f2492618ad4f2d293cad091454e6164eff"} {"level":"info","ts":"2026-07-09T04:31:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d4164edcb14408157ee8d9a65ea3b72ab50d9e47d50b6e6c17f0c46bd35da9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9556fbbf1482fea39f704afebd0f20f2492618ad4f2d293cad091454e6164eff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:31:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:31:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9556fbbf1482fea39f704afebd0f20f2492618ad4f2d293cad091454e6164eff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9556fbbf1482fea39f704afebd0f20f2492618ad4f2d293cad091454e6164eff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d4164edcb14408157ee8d9a65ea3b72ab50d9e47d50b6e6c17f0c46bd35da9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:31:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:31:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d4164edcb14408157ee8d9a65ea3b72ab50d9e47d50b6e6c17f0c46bd35da9a"} {"level":"info","ts":"2026-07-09T04:31:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d4164edcb14408157ee8d9a65ea3b72ab50d9e47d50b6e6c17f0c46bd35da9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9556fbbf1482fea39f704afebd0f20f2492618ad4f2d293cad091454e6164eff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:31:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:31:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9556fbbf1482fea39f704afebd0f20f2492618ad4f2d293cad091454e6164eff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d4164edcb14408157ee8d9a65ea3b72ab50d9e47d50b6e6c17f0c46bd35da9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:31:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:31:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d4164edcb14408157ee8d9a65ea3b72ab50d9e47d50b6e6c17f0c46bd35da9a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9556fbbf1482fea39f704afebd0f20f2492618ad4f2d293cad091454e6164eff"} {"level":"info","ts":"2026-07-09T04:31:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d4164edcb14408157ee8d9a65ea3b72ab50d9e47d50b6e6c17f0c46bd35da9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9556fbbf1482fea39f704afebd0f20f2492618ad4f2d293cad091454e6164eff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:31:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:31:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9556fbbf1482fea39f704afebd0f20f2492618ad4f2d293cad091454e6164eff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d4164edcb14408157ee8d9a65ea3b72ab50d9e47d50b6e6c17f0c46bd35da9a"} {"level":"info","ts":"2026-07-09T04:31:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9556fbbf1482fea39f704afebd0f20f2492618ad4f2d293cad091454e6164eff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d4164edcb14408157ee8d9a65ea3b72ab50d9e47d50b6e6c17f0c46bd35da9a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9556fbbf1482fea39f704afebd0f20f2492618ad4f2d293cad091454e6164eff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:31:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:31:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9556fbbf1482fea39f704afebd0f20f2492618ad4f2d293cad091454e6164eff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9556fbbf1482fea39f704afebd0f20f2492618ad4f2d293cad091454e6164eff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9556fbbf1482fea39f704afebd0f20f2492618ad4f2d293cad091454e6164eff","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9556fbbf1482fea39f704afebd0f20f2492618ad4f2d293cad091454e6164eff"} {"level":"debug","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9556fbbf1482fea39f704afebd0f20f2492618ad4f2d293cad091454e6164eff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:31:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:31:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9556fbbf1482fea39f704afebd0f20f2492618ad4f2d293cad091454e6164eff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d4164edcb14408157ee8d9a65ea3b72ab50d9e47d50b6e6c17f0c46bd35da9a"} {"level":"info","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9556fbbf1482fea39f704afebd0f20f2492618ad4f2d293cad091454e6164eff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9556fbbf1482fea39f704afebd0f20f2492618ad4f2d293cad091454e6164eff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:31:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9556fbbf1482fea39f704afebd0f20f2492618ad4f2d293cad091454e6164eff"} {"level":"info","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9556fbbf1482fea39f704afebd0f20f2492618ad4f2d293cad091454e6164eff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9556fbbf1482fea39f704afebd0f20f2492618ad4f2d293cad091454e6164eff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9556fbbf1482fea39f704afebd0f20f2492618ad4f2d293cad091454e6164eff","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9556fbbf1482fea39f704afebd0f20f2492618ad4f2d293cad091454e6164eff"} {"level":"debug","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9556fbbf1482fea39f704afebd0f20f2492618ad4f2d293cad091454e6164eff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0871bbffffce2f8e1cf6cb489ec35df43e3e4c4c7e5ba45f73ec6abc72dbe67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:31:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9556fbbf1482fea39f704afebd0f20f2492618ad4f2d293cad091454e6164eff"} {"level":"info","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0871bbffffce2f8e1cf6cb489ec35df43e3e4c4c7e5ba45f73ec6abc72dbe67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0871bbffffce2f8e1cf6cb489ec35df43e3e4c4c7e5ba45f73ec6abc72dbe67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:31:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0871bbffffce2f8e1cf6cb489ec35df43e3e4c4c7e5ba45f73ec6abc72dbe67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0871bbffffce2f8e1cf6cb489ec35df43e3e4c4c7e5ba45f73ec6abc72dbe67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:31:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0871bbffffce2f8e1cf6cb489ec35df43e3e4c4c7e5ba45f73ec6abc72dbe67"} {"level":"error","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b0871bbffffce2f8e1cf6cb489ec35df43e3e4c4c7e5ba45f73ec6abc72dbe67","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b0871bbffffce2f8e1cf6cb489ec35df43e3e4c4c7e5ba45f73ec6abc72dbe67\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9556fbbf1482fea39f704afebd0f20f2492618ad4f2d293cad091454e6164eff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:31:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:31:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9556fbbf1482fea39f704afebd0f20f2492618ad4f2d293cad091454e6164eff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9556fbbf1482fea39f704afebd0f20f2492618ad4f2d293cad091454e6164eff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0871bbffffce2f8e1cf6cb489ec35df43e3e4c4c7e5ba45f73ec6abc72dbe67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9556fbbf1482fea39f704afebd0f20f2492618ad4f2d293cad091454e6164eff","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0871bbffffce2f8e1cf6cb489ec35df43e3e4c4c7e5ba45f73ec6abc72dbe67"} {"level":"info","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9556fbbf1482fea39f704afebd0f20f2492618ad4f2d293cad091454e6164eff"} {"level":"debug","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0871bbffffce2f8e1cf6cb489ec35df43e3e4c4c7e5ba45f73ec6abc72dbe67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:31:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:31:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0871bbffffce2f8e1cf6cb489ec35df43e3e4c4c7e5ba45f73ec6abc72dbe67"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0871bbffffce2f8e1cf6cb489ec35df43e3e4c4c7e5ba45f73ec6abc72dbe67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"643ad64ed783fee7b9ca5a19db4019a4c089a63f529665ee799b5f4d55b56123","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:31:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"643ad64ed783fee7b9ca5a19db4019a4c089a63f529665ee799b5f4d55b56123","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0871bbffffce2f8e1cf6cb489ec35df43e3e4c4c7e5ba45f73ec6abc72dbe67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"643ad64ed783fee7b9ca5a19db4019a4c089a63f529665ee799b5f4d55b56123","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/643ad64ed783fee7b9ca5a19db4019a4c089a63f529665ee799b5f4d55b56123"} {"level":"debug","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"643ad64ed783fee7b9ca5a19db4019a4c089a63f529665ee799b5f4d55b56123","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:31:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:31:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["643ad64ed783fee7b9ca5a19db4019a4c089a63f529665ee799b5f4d55b56123"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"643ad64ed783fee7b9ca5a19db4019a4c089a63f529665ee799b5f4d55b56123","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"643ad64ed783fee7b9ca5a19db4019a4c089a63f529665ee799b5f4d55b56123","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0871bbffffce2f8e1cf6cb489ec35df43e3e4c4c7e5ba45f73ec6abc72dbe67"} {"level":"debug","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fe83e46a42548dadaa01a65a3c789332e908f79dcb111a2cf03d5c474f64c7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:31:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/643ad64ed783fee7b9ca5a19db4019a4c089a63f529665ee799b5f4d55b56123"} {"level":"info","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fe83e46a42548dadaa01a65a3c789332e908f79dcb111a2cf03d5c474f64c7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fe83e46a42548dadaa01a65a3c789332e908f79dcb111a2cf03d5c474f64c7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:31:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fe83e46a42548dadaa01a65a3c789332e908f79dcb111a2cf03d5c474f64c7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fe83e46a42548dadaa01a65a3c789332e908f79dcb111a2cf03d5c474f64c7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:31:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1fe83e46a42548dadaa01a65a3c789332e908f79dcb111a2cf03d5c474f64c7c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1fe83e46a42548dadaa01a65a3c789332e908f79dcb111a2cf03d5c474f64c7c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fe83e46a42548dadaa01a65a3c789332e908f79dcb111a2cf03d5c474f64c7c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fe83e46a42548dadaa01a65a3c789332e908f79dcb111a2cf03d5c474f64c7c"} {"level":"debug","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fe83e46a42548dadaa01a65a3c789332e908f79dcb111a2cf03d5c474f64c7c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fe83e46a42548dadaa01a65a3c789332e908f79dcb111a2cf03d5c474f64c7c"} {"level":"debug","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36aa9d55297d04c7916d51ad016b6e74874add4b63ec2166f92528e9db32b517","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:31:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36aa9d55297d04c7916d51ad016b6e74874add4b63ec2166f92528e9db32b517","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fe83e46a42548dadaa01a65a3c789332e908f79dcb111a2cf03d5c474f64c7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:31:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:31:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1fe83e46a42548dadaa01a65a3c789332e908f79dcb111a2cf03d5c474f64c7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36aa9d55297d04c7916d51ad016b6e74874add4b63ec2166f92528e9db32b517"} {"level":"info","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fe83e46a42548dadaa01a65a3c789332e908f79dcb111a2cf03d5c474f64c7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36aa9d55297d04c7916d51ad016b6e74874add4b63ec2166f92528e9db32b517","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:31:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36aa9d55297d04c7916d51ad016b6e74874add4b63ec2166f92528e9db32b517","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fe83e46a42548dadaa01a65a3c789332e908f79dcb111a2cf03d5c474f64c7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36aa9d55297d04c7916d51ad016b6e74874add4b63ec2166f92528e9db32b517","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36aa9d55297d04c7916d51ad016b6e74874add4b63ec2166f92528e9db32b517","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36aa9d55297d04c7916d51ad016b6e74874add4b63ec2166f92528e9db32b517"} {"level":"info","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fe83e46a42548dadaa01a65a3c789332e908f79dcb111a2cf03d5c474f64c7c"} {"level":"debug","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36aa9d55297d04c7916d51ad016b6e74874add4b63ec2166f92528e9db32b517","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3b29a21a2f350affe25aea67a0b1637002d133dd6cc2e5ef5c7adb01726e53d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:31:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3b29a21a2f350affe25aea67a0b1637002d133dd6cc2e5ef5c7adb01726e53d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3b29a21a2f350affe25aea67a0b1637002d133dd6cc2e5ef5c7adb01726e53d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36aa9d55297d04c7916d51ad016b6e74874add4b63ec2166f92528e9db32b517"} {"level":"debug","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3b29a21a2f350affe25aea67a0b1637002d133dd6cc2e5ef5c7adb01726e53d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:31:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3b29a21a2f350affe25aea67a0b1637002d133dd6cc2e5ef5c7adb01726e53d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3b29a21a2f350affe25aea67a0b1637002d133dd6cc2e5ef5c7adb01726e53d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3b29a21a2f350affe25aea67a0b1637002d133dd6cc2e5ef5c7adb01726e53d"} {"level":"debug","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3b29a21a2f350affe25aea67a0b1637002d133dd6cc2e5ef5c7adb01726e53d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36aa9d55297d04c7916d51ad016b6e74874add4b63ec2166f92528e9db32b517","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:31:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:31:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36aa9d55297d04c7916d51ad016b6e74874add4b63ec2166f92528e9db32b517"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3b29a21a2f350affe25aea67a0b1637002d133dd6cc2e5ef5c7adb01726e53d"} {"level":"info","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36aa9d55297d04c7916d51ad016b6e74874add4b63ec2166f92528e9db32b517","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36aa9d55297d04c7916d51ad016b6e74874add4b63ec2166f92528e9db32b517","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5aeaa433c149a213ee3c1ffdb26593c403604f8f411b8919fa3091fa2d1fc01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:31:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5aeaa433c149a213ee3c1ffdb26593c403604f8f411b8919fa3091fa2d1fc01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5aeaa433c149a213ee3c1ffdb26593c403604f8f411b8919fa3091fa2d1fc01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5aeaa433c149a213ee3c1ffdb26593c403604f8f411b8919fa3091fa2d1fc01","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36aa9d55297d04c7916d51ad016b6e74874add4b63ec2166f92528e9db32b517"} {"level":"debug","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5aeaa433c149a213ee3c1ffdb26593c403604f8f411b8919fa3091fa2d1fc01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:31:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5aeaa433c149a213ee3c1ffdb26593c403604f8f411b8919fa3091fa2d1fc01"} {"level":"info","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5aeaa433c149a213ee3c1ffdb26593c403604f8f411b8919fa3091fa2d1fc01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3b29a21a2f350affe25aea67a0b1637002d133dd6cc2e5ef5c7adb01726e53d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:31:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:31:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3b29a21a2f350affe25aea67a0b1637002d133dd6cc2e5ef5c7adb01726e53d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3b29a21a2f350affe25aea67a0b1637002d133dd6cc2e5ef5c7adb01726e53d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5aeaa433c149a213ee3c1ffdb26593c403604f8f411b8919fa3091fa2d1fc01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3b29a21a2f350affe25aea67a0b1637002d133dd6cc2e5ef5c7adb01726e53d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5aeaa433c149a213ee3c1ffdb26593c403604f8f411b8919fa3091fa2d1fc01"} {"level":"debug","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5aeaa433c149a213ee3c1ffdb26593c403604f8f411b8919fa3091fa2d1fc01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:31:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:31:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5aeaa433c149a213ee3c1ffdb26593c403604f8f411b8919fa3091fa2d1fc01"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3b29a21a2f350affe25aea67a0b1637002d133dd6cc2e5ef5c7adb01726e53d"} {"level":"info","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5aeaa433c149a213ee3c1ffdb26593c403604f8f411b8919fa3091fa2d1fc01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d70afc6b3e7c547357b64b0a84086011135dcf5bc732eefcf4dc428f15328246","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:31:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d70afc6b3e7c547357b64b0a84086011135dcf5bc732eefcf4dc428f15328246","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5aeaa433c149a213ee3c1ffdb26593c403604f8f411b8919fa3091fa2d1fc01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"521b8558303b4c9c5df467a426e1d5f57bb7591821eb81f34f28d79aad02504c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:31:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d70afc6b3e7c547357b64b0a84086011135dcf5bc732eefcf4dc428f15328246"} {"level":"info","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"521b8558303b4c9c5df467a426e1d5f57bb7591821eb81f34f28d79aad02504c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d70afc6b3e7c547357b64b0a84086011135dcf5bc732eefcf4dc428f15328246","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:31:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:31:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d70afc6b3e7c547357b64b0a84086011135dcf5bc732eefcf4dc428f15328246"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d70afc6b3e7c547357b64b0a84086011135dcf5bc732eefcf4dc428f15328246","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"521b8558303b4c9c5df467a426e1d5f57bb7591821eb81f34f28d79aad02504c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d70afc6b3e7c547357b64b0a84086011135dcf5bc732eefcf4dc428f15328246","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5aeaa433c149a213ee3c1ffdb26593c403604f8f411b8919fa3091fa2d1fc01"} {"level":"debug","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"521b8558303b4c9c5df467a426e1d5f57bb7591821eb81f34f28d79aad02504c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:31:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"521b8558303b4c9c5df467a426e1d5f57bb7591821eb81f34f28d79aad02504c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"521b8558303b4c9c5df467a426e1d5f57bb7591821eb81f34f28d79aad02504c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/521b8558303b4c9c5df467a426e1d5f57bb7591821eb81f34f28d79aad02504c"} {"level":"debug","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"521b8558303b4c9c5df467a426e1d5f57bb7591821eb81f34f28d79aad02504c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:31:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:31:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["521b8558303b4c9c5df467a426e1d5f57bb7591821eb81f34f28d79aad02504c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d70afc6b3e7c547357b64b0a84086011135dcf5bc732eefcf4dc428f15328246"} {"level":"info","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"521b8558303b4c9c5df467a426e1d5f57bb7591821eb81f34f28d79aad02504c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"521b8558303b4c9c5df467a426e1d5f57bb7591821eb81f34f28d79aad02504c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:31:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/521b8558303b4c9c5df467a426e1d5f57bb7591821eb81f34f28d79aad02504c"} {"level":"info","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"521b8558303b4c9c5df467a426e1d5f57bb7591821eb81f34f28d79aad02504c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"521b8558303b4c9c5df467a426e1d5f57bb7591821eb81f34f28d79aad02504c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"521b8558303b4c9c5df467a426e1d5f57bb7591821eb81f34f28d79aad02504c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/521b8558303b4c9c5df467a426e1d5f57bb7591821eb81f34f28d79aad02504c"} {"level":"debug","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"521b8558303b4c9c5df467a426e1d5f57bb7591821eb81f34f28d79aad02504c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/521b8558303b4c9c5df467a426e1d5f57bb7591821eb81f34f28d79aad02504c"} {"level":"debug","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"521b8558303b4c9c5df467a426e1d5f57bb7591821eb81f34f28d79aad02504c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:31:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:31:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["521b8558303b4c9c5df467a426e1d5f57bb7591821eb81f34f28d79aad02504c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"521b8558303b4c9c5df467a426e1d5f57bb7591821eb81f34f28d79aad02504c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"521b8558303b4c9c5df467a426e1d5f57bb7591821eb81f34f28d79aad02504c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:31:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"521b8558303b4c9c5df467a426e1d5f57bb7591821eb81f34f28d79aad02504c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"521b8558303b4c9c5df467a426e1d5f57bb7591821eb81f34f28d79aad02504c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"521b8558303b4c9c5df467a426e1d5f57bb7591821eb81f34f28d79aad02504c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/521b8558303b4c9c5df467a426e1d5f57bb7591821eb81f34f28d79aad02504c"} {"level":"debug","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"521b8558303b4c9c5df467a426e1d5f57bb7591821eb81f34f28d79aad02504c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/521b8558303b4c9c5df467a426e1d5f57bb7591821eb81f34f28d79aad02504c"} {"level":"debug","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"521b8558303b4c9c5df467a426e1d5f57bb7591821eb81f34f28d79aad02504c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:31:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:31:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["521b8558303b4c9c5df467a426e1d5f57bb7591821eb81f34f28d79aad02504c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"521b8558303b4c9c5df467a426e1d5f57bb7591821eb81f34f28d79aad02504c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"521b8558303b4c9c5df467a426e1d5f57bb7591821eb81f34f28d79aad02504c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:31:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"521b8558303b4c9c5df467a426e1d5f57bb7591821eb81f34f28d79aad02504c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"521b8558303b4c9c5df467a426e1d5f57bb7591821eb81f34f28d79aad02504c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"521b8558303b4c9c5df467a426e1d5f57bb7591821eb81f34f28d79aad02504c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/521b8558303b4c9c5df467a426e1d5f57bb7591821eb81f34f28d79aad02504c"} {"level":"debug","ts":"2026-07-09T04:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"521b8558303b4c9c5df467a426e1d5f57bb7591821eb81f34f28d79aad02504c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/521b8558303b4c9c5df467a426e1d5f57bb7591821eb81f34f28d79aad02504c"} {"level":"debug","ts":"2026-07-09T04:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"521b8558303b4c9c5df467a426e1d5f57bb7591821eb81f34f28d79aad02504c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:31:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:31:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["521b8558303b4c9c5df467a426e1d5f57bb7591821eb81f34f28d79aad02504c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"521b8558303b4c9c5df467a426e1d5f57bb7591821eb81f34f28d79aad02504c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"521b8558303b4c9c5df467a426e1d5f57bb7591821eb81f34f28d79aad02504c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/521b8558303b4c9c5df467a426e1d5f57bb7591821eb81f34f28d79aad02504c"} {"level":"info","ts":"2026-07-09T04:31:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e71fe051-1aec-4a8d-87e7-8cdecaf1661d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:42054","PortSpecifier":{"PortValue":42054}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e71fe051-1aec-4a8d-87e7-8cdecaf1661d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6bd312.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T04:31:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e71fe051-1aec-4a8d-87e7-8cdecaf1661d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:42054","PortSpecifier":{"PortValue":42054}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783571476,"nanos":965587964},"http":{"id":"e71fe051-1aec-4a8d-87e7-8cdecaf1661d","method":"POST","headers":{":authority":"e2e-shared-a-6bd312.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T04:31:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e71fe051-1aec-4a8d-87e7-8cdecaf1661d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-09T04:31:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e71fe051-1aec-4a8d-87e7-8cdecaf1661d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3462404a-d93a-4f63-9ebc-6c7f440ea30a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=98c488c9-b640-4da6-939b-4ae7b07b3478"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e705e1dce26e"]}} {"level":"debug","ts":"2026-07-09T04:31:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e71fe051-1aec-4a8d-87e7-8cdecaf1661d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e705e1dce26e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=98c488c9-b640-4da6-939b-4ae7b07b3478"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3462404a-d93a-4f63-9ebc-6c7f440ea30a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0efe2b4768a44f8324e865b5777735eaabae17774e28c67ace4220c24847f863"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6bd312.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T04:31:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e71fe051-1aec-4a8d-87e7-8cdecaf1661d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:31:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e71fe051-1aec-4a8d-87e7-8cdecaf1661d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:31:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e71fe051-1aec-4a8d-87e7-8cdecaf1661d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6bd312/auth-test-model-6bd312\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:31:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e71fe051-1aec-4a8d-87e7-8cdecaf1661d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-09T04:31:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e71fe051-1aec-4a8d-87e7-8cdecaf1661d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T04:31:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e71fe051-1aec-4a8d-87e7-8cdecaf1661d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-09T04:31:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e71fe051-1aec-4a8d-87e7-8cdecaf1661d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T04:31:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e71fe051-1aec-4a8d-87e7-8cdecaf1661d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T04:31:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"387f939b-c766-4027-a091-27c3dc1f9217","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57948","PortSpecifier":{"PortValue":57948}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"387f939b-c766-4027-a091-27c3dc1f9217","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-589b59.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T04:31:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"387f939b-c766-4027-a091-27c3dc1f9217","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57948","PortSpecifier":{"PortValue":57948}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783571477,"nanos":25356796},"http":{"id":"387f939b-c766-4027-a091-27c3dc1f9217","method":"POST","headers":{":authority":"e2e-shared-b-589b59.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T04:31:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"387f939b-c766-4027-a091-27c3dc1f9217","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-09T04:31:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"387f939b-c766-4027-a091-27c3dc1f9217","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3462404a-d93a-4f63-9ebc-6c7f440ea30a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=98c488c9-b640-4da6-939b-4ae7b07b3478"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e705e1dce26e"]}} {"level":"debug","ts":"2026-07-09T04:31:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"387f939b-c766-4027-a091-27c3dc1f9217","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e705e1dce26e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=98c488c9-b640-4da6-939b-4ae7b07b3478"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3462404a-d93a-4f63-9ebc-6c7f440ea30a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9556fbbf1482fea39f704afebd0f20f2492618ad4f2d293cad091454e6164eff"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-589b59.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T04:31:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"387f939b-c766-4027-a091-27c3dc1f9217","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:31:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"387f939b-c766-4027-a091-27c3dc1f9217","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:31:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"387f939b-c766-4027-a091-27c3dc1f9217","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-589b59/auth-test-model-589b59\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:31:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"387f939b-c766-4027-a091-27c3dc1f9217","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-09T04:31:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"387f939b-c766-4027-a091-27c3dc1f9217","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T04:31:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"387f939b-c766-4027-a091-27c3dc1f9217","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-09T04:31:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"387f939b-c766-4027-a091-27c3dc1f9217","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T04:31:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"387f939b-c766-4027-a091-27c3dc1f9217","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T04:31:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0c9c0a6b-30e1-4161-80ed-286fc1efc3c8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:42060","PortSpecifier":{"PortValue":42060}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0c9c0a6b-30e1-4161-80ed-286fc1efc3c8","method":"GET","path":"/maas-api/v1/api-keys/123d8b82-dd81-448f-806b-d9da9e839337","host":"e2e-shared-a-6bd312.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T04:31:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0c9c0a6b-30e1-4161-80ed-286fc1efc3c8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:42060","PortSpecifier":{"PortValue":42060}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783571477,"nanos":117817257},"http":{"id":"0c9c0a6b-30e1-4161-80ed-286fc1efc3c8","method":"GET","headers":{":authority":"e2e-shared-a-6bd312.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/123d8b82-dd81-448f-806b-d9da9e839337",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T04:31:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0c9c0a6b-30e1-4161-80ed-286fc1efc3c8","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-09T04:31:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0c9c0a6b-30e1-4161-80ed-286fc1efc3c8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3462404a-d93a-4f63-9ebc-6c7f440ea30a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=98c488c9-b640-4da6-939b-4ae7b07b3478"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e705e1dce26e"]}} {"level":"debug","ts":"2026-07-09T04:31:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0c9c0a6b-30e1-4161-80ed-286fc1efc3c8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e705e1dce26e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=98c488c9-b640-4da6-939b-4ae7b07b3478"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3462404a-d93a-4f63-9ebc-6c7f440ea30a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0efe2b4768a44f8324e865b5777735eaabae17774e28c67ace4220c24847f863"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6bd312.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/123d8b82-dd81-448f-806b-d9da9e839337",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T04:31:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c9c0a6b-30e1-4161-80ed-286fc1efc3c8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:31:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c9c0a6b-30e1-4161-80ed-286fc1efc3c8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:31:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c9c0a6b-30e1-4161-80ed-286fc1efc3c8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6bd312/auth-test-model-6bd312\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:31:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0c9c0a6b-30e1-4161-80ed-286fc1efc3c8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-09T04:31:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c9c0a6b-30e1-4161-80ed-286fc1efc3c8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T04:31:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c9c0a6b-30e1-4161-80ed-286fc1efc3c8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-09T04:31:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0c9c0a6b-30e1-4161-80ed-286fc1efc3c8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T04:31:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0c9c0a6b-30e1-4161-80ed-286fc1efc3c8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T04:31:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2cd7afc1-6045-4dc7-97e4-1c6eeeb6dc2f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57962","PortSpecifier":{"PortValue":57962}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2cd7afc1-6045-4dc7-97e4-1c6eeeb6dc2f","method":"GET","path":"/maas-api/v1/api-keys/4069f26f-d19d-4b3f-b605-c72d39c1d92b","host":"e2e-shared-b-589b59.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T04:31:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2cd7afc1-6045-4dc7-97e4-1c6eeeb6dc2f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57962","PortSpecifier":{"PortValue":57962}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783571477,"nanos":152953292},"http":{"id":"2cd7afc1-6045-4dc7-97e4-1c6eeeb6dc2f","method":"GET","headers":{":authority":"e2e-shared-b-589b59.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/4069f26f-d19d-4b3f-b605-c72d39c1d92b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T04:31:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2cd7afc1-6045-4dc7-97e4-1c6eeeb6dc2f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-09T04:31:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2cd7afc1-6045-4dc7-97e4-1c6eeeb6dc2f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3462404a-d93a-4f63-9ebc-6c7f440ea30a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=98c488c9-b640-4da6-939b-4ae7b07b3478"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e705e1dce26e"]}} {"level":"debug","ts":"2026-07-09T04:31:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2cd7afc1-6045-4dc7-97e4-1c6eeeb6dc2f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e705e1dce26e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=98c488c9-b640-4da6-939b-4ae7b07b3478"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3462404a-d93a-4f63-9ebc-6c7f440ea30a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9556fbbf1482fea39f704afebd0f20f2492618ad4f2d293cad091454e6164eff"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-589b59.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/4069f26f-d19d-4b3f-b605-c72d39c1d92b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T04:31:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2cd7afc1-6045-4dc7-97e4-1c6eeeb6dc2f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:31:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2cd7afc1-6045-4dc7-97e4-1c6eeeb6dc2f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:31:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2cd7afc1-6045-4dc7-97e4-1c6eeeb6dc2f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-589b59/auth-test-model-589b59\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:31:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2cd7afc1-6045-4dc7-97e4-1c6eeeb6dc2f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-09T04:31:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2cd7afc1-6045-4dc7-97e4-1c6eeeb6dc2f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T04:31:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2cd7afc1-6045-4dc7-97e4-1c6eeeb6dc2f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-09T04:31:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2cd7afc1-6045-4dc7-97e4-1c6eeeb6dc2f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T04:31:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2cd7afc1-6045-4dc7-97e4-1c6eeeb6dc2f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T04:31:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"27d35318-01a8-4650-8f7c-191a0f106d0b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60092","PortSpecifier":{"PortValue":60092}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"27d35318-01a8-4650-8f7c-191a0f106d0b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6bd312.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T04:31:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"27d35318-01a8-4650-8f7c-191a0f106d0b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60092","PortSpecifier":{"PortValue":60092}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783571496,"nanos":248642583},"http":{"id":"27d35318-01a8-4650-8f7c-191a0f106d0b","method":"POST","headers":{":authority":"e2e-shared-a-6bd312.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T04:31:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"27d35318-01a8-4650-8f7c-191a0f106d0b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-09T04:31:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"27d35318-01a8-4650-8f7c-191a0f106d0b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3462404a-d93a-4f63-9ebc-6c7f440ea30a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=98c488c9-b640-4da6-939b-4ae7b07b3478"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e705e1dce26e"]}} {"level":"debug","ts":"2026-07-09T04:31:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"27d35318-01a8-4650-8f7c-191a0f106d0b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e705e1dce26e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=98c488c9-b640-4da6-939b-4ae7b07b3478"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3462404a-d93a-4f63-9ebc-6c7f440ea30a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0efe2b4768a44f8324e865b5777735eaabae17774e28c67ace4220c24847f863"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6bd312.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T04:31:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27d35318-01a8-4650-8f7c-191a0f106d0b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:31:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27d35318-01a8-4650-8f7c-191a0f106d0b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:31:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27d35318-01a8-4650-8f7c-191a0f106d0b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6bd312/auth-test-model-6bd312\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:31:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"27d35318-01a8-4650-8f7c-191a0f106d0b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-09T04:31:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27d35318-01a8-4650-8f7c-191a0f106d0b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T04:31:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27d35318-01a8-4650-8f7c-191a0f106d0b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-09T04:31:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"27d35318-01a8-4650-8f7c-191a0f106d0b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T04:31:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"27d35318-01a8-4650-8f7c-191a0f106d0b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T04:31:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7ac53d13-046b-4fca-ae0e-6a2b35c91b66","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:40940","PortSpecifier":{"PortValue":40940}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7ac53d13-046b-4fca-ae0e-6a2b35c91b66","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-589b59.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T04:31:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7ac53d13-046b-4fca-ae0e-6a2b35c91b66","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:40940","PortSpecifier":{"PortValue":40940}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783571496,"nanos":283933161},"http":{"id":"7ac53d13-046b-4fca-ae0e-6a2b35c91b66","method":"POST","headers":{":authority":"e2e-shared-b-589b59.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T04:31:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7ac53d13-046b-4fca-ae0e-6a2b35c91b66","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-09T04:31:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7ac53d13-046b-4fca-ae0e-6a2b35c91b66","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3462404a-d93a-4f63-9ebc-6c7f440ea30a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=98c488c9-b640-4da6-939b-4ae7b07b3478"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e705e1dce26e"]}} {"level":"debug","ts":"2026-07-09T04:31:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7ac53d13-046b-4fca-ae0e-6a2b35c91b66","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e705e1dce26e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=98c488c9-b640-4da6-939b-4ae7b07b3478"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3462404a-d93a-4f63-9ebc-6c7f440ea30a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9556fbbf1482fea39f704afebd0f20f2492618ad4f2d293cad091454e6164eff"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-589b59.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T04:31:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ac53d13-046b-4fca-ae0e-6a2b35c91b66","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:31:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ac53d13-046b-4fca-ae0e-6a2b35c91b66","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:31:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ac53d13-046b-4fca-ae0e-6a2b35c91b66","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-589b59/auth-test-model-589b59\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:31:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7ac53d13-046b-4fca-ae0e-6a2b35c91b66","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-09T04:31:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ac53d13-046b-4fca-ae0e-6a2b35c91b66","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T04:31:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ac53d13-046b-4fca-ae0e-6a2b35c91b66","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-09T04:31:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7ac53d13-046b-4fca-ae0e-6a2b35c91b66","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T04:31:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7ac53d13-046b-4fca-ae0e-6a2b35c91b66","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T04:31:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"220abb25-26f2-4207-962a-64a72076a393","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60096","PortSpecifier":{"PortValue":60096}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"220abb25-26f2-4207-962a-64a72076a393","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-6bd312.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T04:31:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"220abb25-26f2-4207-962a-64a72076a393","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60096","PortSpecifier":{"PortValue":60096}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783571496,"nanos":332166122},"http":{"id":"220abb25-26f2-4207-962a-64a72076a393","method":"GET","headers":{":authority":"e2e-shared-a-6bd312.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T04:31:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"220abb25-26f2-4207-962a-64a72076a393","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-N6DUSdCD1q5Natcs_wZXUUJfhadfoR6RF9GY2DppjBcw7DuMD9ZGIlJxOkC3"} {"level":"debug","ts":"2026-07-09T04:31:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"220abb25-26f2-4207-962a-64a72076a393","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6bd312.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-N6DUSdCD1q5Natcs_wZXUUJfhadfoR6RF9GY2DppjBcw7DuMD9ZGIlJxOkC3\"}"} {"level":"debug","ts":"2026-07-09T04:31:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"220abb25-26f2-4207-962a-64a72076a393","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6bd312.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"21b75783-f188-4b2f-948c-df1a5e4a9e2e","keyName":"e2e-auth-iso-a-724c2b","subscription":"e2e-auth-iso-eaf440","tenant":"e2e-shared-a-6bd312","userId":"21b75783-f188-4b2f-948c-df1a5e4a9e2e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-09T04:31:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"220abb25-26f2-4207-962a-64a72076a393","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T04:31:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"220abb25-26f2-4207-962a-64a72076a393","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:31:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"220abb25-26f2-4207-962a-64a72076a393","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:31:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"220abb25-26f2-4207-962a-64a72076a393","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6bd312/auth-test-model-6bd312\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:31:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"220abb25-26f2-4207-962a-64a72076a393","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T04:31:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"220abb25-26f2-4207-962a-64a72076a393","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-eaf440"} {"level":"debug","ts":"2026-07-09T04:31:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"220abb25-26f2-4207-962a-64a72076a393","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-09T04:31:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"220abb25-26f2-4207-962a-64a72076a393","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-09T04:31:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"220abb25-26f2-4207-962a-64a72076a393","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T04:31:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"220abb25-26f2-4207-962a-64a72076a393","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T04:32:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"623627c5-ed29-4d4d-8d1c-5f437fa4e39d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:34548","PortSpecifier":{"PortValue":34548}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"623627c5-ed29-4d4d-8d1c-5f437fa4e39d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6bd312.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T04:32:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"623627c5-ed29-4d4d-8d1c-5f437fa4e39d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:34548","PortSpecifier":{"PortValue":34548}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783571522,"nanos":653641647},"http":{"id":"623627c5-ed29-4d4d-8d1c-5f437fa4e39d","method":"POST","headers":{":authority":"e2e-shared-a-6bd312.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T04:32:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"623627c5-ed29-4d4d-8d1c-5f437fa4e39d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-09T04:32:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"623627c5-ed29-4d4d-8d1c-5f437fa4e39d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3462404a-d93a-4f63-9ebc-6c7f440ea30a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=98c488c9-b640-4da6-939b-4ae7b07b3478"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e705e1dce26e"]}} {"level":"debug","ts":"2026-07-09T04:32:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"623627c5-ed29-4d4d-8d1c-5f437fa4e39d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e705e1dce26e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=98c488c9-b640-4da6-939b-4ae7b07b3478"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3462404a-d93a-4f63-9ebc-6c7f440ea30a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0efe2b4768a44f8324e865b5777735eaabae17774e28c67ace4220c24847f863"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6bd312.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T04:32:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"623627c5-ed29-4d4d-8d1c-5f437fa4e39d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:32:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"623627c5-ed29-4d4d-8d1c-5f437fa4e39d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:32:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"623627c5-ed29-4d4d-8d1c-5f437fa4e39d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6bd312/auth-test-model-6bd312\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:32:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"623627c5-ed29-4d4d-8d1c-5f437fa4e39d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-09T04:32:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"623627c5-ed29-4d4d-8d1c-5f437fa4e39d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T04:32:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"623627c5-ed29-4d4d-8d1c-5f437fa4e39d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-09T04:32:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"623627c5-ed29-4d4d-8d1c-5f437fa4e39d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T04:32:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"623627c5-ed29-4d4d-8d1c-5f437fa4e39d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T04:32:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"64f1b68b-24b3-4705-b686-704f668628de","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49764","PortSpecifier":{"PortValue":49764}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"64f1b68b-24b3-4705-b686-704f668628de","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-589b59.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T04:32:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"64f1b68b-24b3-4705-b686-704f668628de","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49764","PortSpecifier":{"PortValue":49764}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783571522,"nanos":691444772},"http":{"id":"64f1b68b-24b3-4705-b686-704f668628de","method":"POST","headers":{":authority":"e2e-shared-b-589b59.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T04:32:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"64f1b68b-24b3-4705-b686-704f668628de","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-09T04:32:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"64f1b68b-24b3-4705-b686-704f668628de","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3462404a-d93a-4f63-9ebc-6c7f440ea30a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=98c488c9-b640-4da6-939b-4ae7b07b3478"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e705e1dce26e"]}} {"level":"debug","ts":"2026-07-09T04:32:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"64f1b68b-24b3-4705-b686-704f668628de","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e705e1dce26e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=98c488c9-b640-4da6-939b-4ae7b07b3478"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3462404a-d93a-4f63-9ebc-6c7f440ea30a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9556fbbf1482fea39f704afebd0f20f2492618ad4f2d293cad091454e6164eff"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-589b59.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T04:32:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"64f1b68b-24b3-4705-b686-704f668628de","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:32:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"64f1b68b-24b3-4705-b686-704f668628de","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:32:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"64f1b68b-24b3-4705-b686-704f668628de","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-589b59/auth-test-model-589b59\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:32:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"64f1b68b-24b3-4705-b686-704f668628de","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-09T04:32:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"64f1b68b-24b3-4705-b686-704f668628de","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T04:32:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"64f1b68b-24b3-4705-b686-704f668628de","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-09T04:32:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"64f1b68b-24b3-4705-b686-704f668628de","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T04:32:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"64f1b68b-24b3-4705-b686-704f668628de","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T04:32:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b0d02908-c1f5-4a5a-8128-424fc484ab36","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49776","PortSpecifier":{"PortValue":49776}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b0d02908-c1f5-4a5a-8128-424fc484ab36","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-589b59.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T04:32:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b0d02908-c1f5-4a5a-8128-424fc484ab36","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49776","PortSpecifier":{"PortValue":49776}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783571522,"nanos":727824120},"http":{"id":"b0d02908-c1f5-4a5a-8128-424fc484ab36","method":"GET","headers":{":authority":"e2e-shared-b-589b59.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T04:32:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b0d02908-c1f5-4a5a-8128-424fc484ab36","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1dUOYpt27Az7vlyJz_mgJMncgI87wK2szGcMTxS5PZclZoLC1iIZOFK128wNy"} {"level":"debug","ts":"2026-07-09T04:32:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b0d02908-c1f5-4a5a-8128-424fc484ab36","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-589b59.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1dUOYpt27Az7vlyJz_mgJMncgI87wK2szGcMTxS5PZclZoLC1iIZOFK128wNy\"}"} {"level":"debug","ts":"2026-07-09T04:32:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b0d02908-c1f5-4a5a-8128-424fc484ab36","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-589b59.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-09T04:32:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b0d02908-c1f5-4a5a-8128-424fc484ab36","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"9556fbbf1482fea39f704afebd0f20f2492618ad4f2d293cad091454e6164eff"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-589b59.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T04:32:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b0d02908-c1f5-4a5a-8128-424fc484ab36","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:32:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"b0d02908-c1f5-4a5a-8128-424fc484ab36","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-09T04:32:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b0d02908-c1f5-4a5a-8128-424fc484ab36","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-09T04:32:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b0d02908-c1f5-4a5a-8128-424fc484ab36","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-07-09T04:32:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9fcb70cc-2150-97b1-a6b7-1014e9464c3e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:51686","PortSpecifier":{"PortValue":51686}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9fcb70cc-2150-97b1-a6b7-1014e9464c3e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6bd312.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T04:32:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9fcb70cc-2150-97b1-a6b7-1014e9464c3e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:51686","PortSpecifier":{"PortValue":51686}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783571539,"nanos":706565178},"http":{"id":"9fcb70cc-2150-97b1-a6b7-1014e9464c3e","method":"POST","headers":{":authority":"e2e-shared-a-6bd312.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T04:32:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9fcb70cc-2150-97b1-a6b7-1014e9464c3e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-09T04:32:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9fcb70cc-2150-97b1-a6b7-1014e9464c3e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3462404a-d93a-4f63-9ebc-6c7f440ea30a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=98c488c9-b640-4da6-939b-4ae7b07b3478"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e705e1dce26e"]}} {"level":"debug","ts":"2026-07-09T04:32:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9fcb70cc-2150-97b1-a6b7-1014e9464c3e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e705e1dce26e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=98c488c9-b640-4da6-939b-4ae7b07b3478"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3462404a-d93a-4f63-9ebc-6c7f440ea30a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0efe2b4768a44f8324e865b5777735eaabae17774e28c67ace4220c24847f863"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6bd312.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T04:32:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9fcb70cc-2150-97b1-a6b7-1014e9464c3e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:32:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9fcb70cc-2150-97b1-a6b7-1014e9464c3e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:32:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9fcb70cc-2150-97b1-a6b7-1014e9464c3e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6bd312/auth-test-model-6bd312\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:32:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9fcb70cc-2150-97b1-a6b7-1014e9464c3e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-09T04:32:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9fcb70cc-2150-97b1-a6b7-1014e9464c3e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T04:32:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9fcb70cc-2150-97b1-a6b7-1014e9464c3e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-09T04:32:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9fcb70cc-2150-97b1-a6b7-1014e9464c3e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T04:32:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9fcb70cc-2150-97b1-a6b7-1014e9464c3e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T04:32:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"39c1febb-06ea-4ecd-b416-2ff5fb06cdae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48808","PortSpecifier":{"PortValue":48808}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"39c1febb-06ea-4ecd-b416-2ff5fb06cdae","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-589b59.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T04:32:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"39c1febb-06ea-4ecd-b416-2ff5fb06cdae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48808","PortSpecifier":{"PortValue":48808}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783571539,"nanos":743274681},"http":{"id":"39c1febb-06ea-4ecd-b416-2ff5fb06cdae","method":"POST","headers":{":authority":"e2e-shared-b-589b59.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T04:32:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"39c1febb-06ea-4ecd-b416-2ff5fb06cdae","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-09T04:32:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"39c1febb-06ea-4ecd-b416-2ff5fb06cdae","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3462404a-d93a-4f63-9ebc-6c7f440ea30a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=98c488c9-b640-4da6-939b-4ae7b07b3478"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e705e1dce26e"]}} {"level":"debug","ts":"2026-07-09T04:32:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"39c1febb-06ea-4ecd-b416-2ff5fb06cdae","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e705e1dce26e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=98c488c9-b640-4da6-939b-4ae7b07b3478"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3462404a-d93a-4f63-9ebc-6c7f440ea30a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9556fbbf1482fea39f704afebd0f20f2492618ad4f2d293cad091454e6164eff"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-589b59.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T04:32:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39c1febb-06ea-4ecd-b416-2ff5fb06cdae","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:32:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39c1febb-06ea-4ecd-b416-2ff5fb06cdae","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:32:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39c1febb-06ea-4ecd-b416-2ff5fb06cdae","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-589b59/auth-test-model-589b59\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:32:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"39c1febb-06ea-4ecd-b416-2ff5fb06cdae","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-09T04:32:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39c1febb-06ea-4ecd-b416-2ff5fb06cdae","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T04:32:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39c1febb-06ea-4ecd-b416-2ff5fb06cdae","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-09T04:32:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"39c1febb-06ea-4ecd-b416-2ff5fb06cdae","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T04:32:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"39c1febb-06ea-4ecd-b416-2ff5fb06cdae","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T04:32:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"18967170-039c-4708-bd2f-8a7f49393753","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:51700","PortSpecifier":{"PortValue":51700}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"18967170-039c-4708-bd2f-8a7f49393753","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-6bd312.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T04:32:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"18967170-039c-4708-bd2f-8a7f49393753","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:51700","PortSpecifier":{"PortValue":51700}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783571539,"nanos":784371272},"http":{"id":"18967170-039c-4708-bd2f-8a7f49393753","method":"POST","headers":{":authority":"e2e-shared-a-6bd312.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T04:32:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"18967170-039c-4708-bd2f-8a7f49393753","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-09T04:32:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"18967170-039c-4708-bd2f-8a7f49393753","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3462404a-d93a-4f63-9ebc-6c7f440ea30a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=98c488c9-b640-4da6-939b-4ae7b07b3478"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e705e1dce26e"]}} {"level":"debug","ts":"2026-07-09T04:32:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"18967170-039c-4708-bd2f-8a7f49393753","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e705e1dce26e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=98c488c9-b640-4da6-939b-4ae7b07b3478"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3462404a-d93a-4f63-9ebc-6c7f440ea30a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0efe2b4768a44f8324e865b5777735eaabae17774e28c67ace4220c24847f863"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6bd312.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T04:32:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"18967170-039c-4708-bd2f-8a7f49393753","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:32:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"18967170-039c-4708-bd2f-8a7f49393753","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:32:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"18967170-039c-4708-bd2f-8a7f49393753","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6bd312/auth-test-model-6bd312\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:32:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"18967170-039c-4708-bd2f-8a7f49393753","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-09T04:32:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"18967170-039c-4708-bd2f-8a7f49393753","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-09T04:32:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"18967170-039c-4708-bd2f-8a7f49393753","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-09T04:32:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"18967170-039c-4708-bd2f-8a7f49393753","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T04:32:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"18967170-039c-4708-bd2f-8a7f49393753","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T04:32:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5f7e4d26-853d-4230-844c-ba96813b15bd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48816","PortSpecifier":{"PortValue":48816}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5f7e4d26-853d-4230-844c-ba96813b15bd","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-589b59.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T04:32:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5f7e4d26-853d-4230-844c-ba96813b15bd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48816","PortSpecifier":{"PortValue":48816}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783571539,"nanos":825677297},"http":{"id":"5f7e4d26-853d-4230-844c-ba96813b15bd","method":"POST","headers":{":authority":"e2e-shared-b-589b59.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T04:32:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5f7e4d26-853d-4230-844c-ba96813b15bd","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-09T04:32:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5f7e4d26-853d-4230-844c-ba96813b15bd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3462404a-d93a-4f63-9ebc-6c7f440ea30a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=98c488c9-b640-4da6-939b-4ae7b07b3478"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e705e1dce26e"]}} {"level":"debug","ts":"2026-07-09T04:32:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5f7e4d26-853d-4230-844c-ba96813b15bd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e705e1dce26e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=98c488c9-b640-4da6-939b-4ae7b07b3478"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3462404a-d93a-4f63-9ebc-6c7f440ea30a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9556fbbf1482fea39f704afebd0f20f2492618ad4f2d293cad091454e6164eff"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-589b59.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T04:32:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f7e4d26-853d-4230-844c-ba96813b15bd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:32:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f7e4d26-853d-4230-844c-ba96813b15bd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:32:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f7e4d26-853d-4230-844c-ba96813b15bd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-589b59/auth-test-model-589b59\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:32:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5f7e4d26-853d-4230-844c-ba96813b15bd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-09T04:32:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f7e4d26-853d-4230-844c-ba96813b15bd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T04:32:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f7e4d26-853d-4230-844c-ba96813b15bd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-09T04:32:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5f7e4d26-853d-4230-844c-ba96813b15bd","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T04:32:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5f7e4d26-853d-4230-844c-ba96813b15bd","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T04:32:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6cf98ea7-d316-4790-bec1-deee9cd1c9b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:40722","PortSpecifier":{"PortValue":40722}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6cf98ea7-d316-4790-bec1-deee9cd1c9b4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6bd312.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T04:32:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6cf98ea7-d316-4790-bec1-deee9cd1c9b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:40722","PortSpecifier":{"PortValue":40722}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783571556,"nanos":874529648},"http":{"id":"6cf98ea7-d316-4790-bec1-deee9cd1c9b4","method":"POST","headers":{":authority":"e2e-shared-a-6bd312.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T04:32:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6cf98ea7-d316-4790-bec1-deee9cd1c9b4","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-09T04:32:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6cf98ea7-d316-4790-bec1-deee9cd1c9b4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3462404a-d93a-4f63-9ebc-6c7f440ea30a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=98c488c9-b640-4da6-939b-4ae7b07b3478"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e705e1dce26e"]}} {"level":"debug","ts":"2026-07-09T04:32:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6cf98ea7-d316-4790-bec1-deee9cd1c9b4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e705e1dce26e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=98c488c9-b640-4da6-939b-4ae7b07b3478"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3462404a-d93a-4f63-9ebc-6c7f440ea30a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0efe2b4768a44f8324e865b5777735eaabae17774e28c67ace4220c24847f863"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6bd312.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T04:32:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6cf98ea7-d316-4790-bec1-deee9cd1c9b4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:32:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6cf98ea7-d316-4790-bec1-deee9cd1c9b4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:32:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6cf98ea7-d316-4790-bec1-deee9cd1c9b4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6bd312/auth-test-model-6bd312\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:32:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6cf98ea7-d316-4790-bec1-deee9cd1c9b4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-09T04:32:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6cf98ea7-d316-4790-bec1-deee9cd1c9b4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T04:32:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6cf98ea7-d316-4790-bec1-deee9cd1c9b4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-09T04:32:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6cf98ea7-d316-4790-bec1-deee9cd1c9b4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T04:32:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6cf98ea7-d316-4790-bec1-deee9cd1c9b4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T04:32:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2bfe32f5-747d-441f-8763-1436c10fa614","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54870","PortSpecifier":{"PortValue":54870}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2bfe32f5-747d-441f-8763-1436c10fa614","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-589b59.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T04:32:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2bfe32f5-747d-441f-8763-1436c10fa614","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54870","PortSpecifier":{"PortValue":54870}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783571556,"nanos":908751517},"http":{"id":"2bfe32f5-747d-441f-8763-1436c10fa614","method":"POST","headers":{":authority":"e2e-shared-b-589b59.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T04:32:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2bfe32f5-747d-441f-8763-1436c10fa614","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-09T04:32:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2bfe32f5-747d-441f-8763-1436c10fa614","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3462404a-d93a-4f63-9ebc-6c7f440ea30a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=98c488c9-b640-4da6-939b-4ae7b07b3478"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e705e1dce26e"]}} {"level":"debug","ts":"2026-07-09T04:32:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2bfe32f5-747d-441f-8763-1436c10fa614","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e705e1dce26e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=98c488c9-b640-4da6-939b-4ae7b07b3478"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3462404a-d93a-4f63-9ebc-6c7f440ea30a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9556fbbf1482fea39f704afebd0f20f2492618ad4f2d293cad091454e6164eff"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-589b59.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T04:32:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2bfe32f5-747d-441f-8763-1436c10fa614","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:32:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2bfe32f5-747d-441f-8763-1436c10fa614","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:32:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2bfe32f5-747d-441f-8763-1436c10fa614","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-589b59/auth-test-model-589b59\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:32:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2bfe32f5-747d-441f-8763-1436c10fa614","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-09T04:32:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2bfe32f5-747d-441f-8763-1436c10fa614","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T04:32:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2bfe32f5-747d-441f-8763-1436c10fa614","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-09T04:32:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2bfe32f5-747d-441f-8763-1436c10fa614","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T04:32:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2bfe32f5-747d-441f-8763-1436c10fa614","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T04:32:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"daf8c835-11f7-49ee-9c75-e9163bb9e2a6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54872","PortSpecifier":{"PortValue":54872}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"daf8c835-11f7-49ee-9c75-e9163bb9e2a6","method":"GET","path":"/maas-api/v1/api-keys/76adc5f8-d471-49b3-99b5-b747eb4d19ad","host":"e2e-shared-b-589b59.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T04:32:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"daf8c835-11f7-49ee-9c75-e9163bb9e2a6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54872","PortSpecifier":{"PortValue":54872}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783571556,"nanos":941788516},"http":{"id":"daf8c835-11f7-49ee-9c75-e9163bb9e2a6","method":"GET","headers":{":authority":"e2e-shared-b-589b59.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/76adc5f8-d471-49b3-99b5-b747eb4d19ad",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T04:32:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"daf8c835-11f7-49ee-9c75-e9163bb9e2a6","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-09T04:32:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"daf8c835-11f7-49ee-9c75-e9163bb9e2a6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3462404a-d93a-4f63-9ebc-6c7f440ea30a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=98c488c9-b640-4da6-939b-4ae7b07b3478"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e705e1dce26e"]}} {"level":"debug","ts":"2026-07-09T04:32:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"daf8c835-11f7-49ee-9c75-e9163bb9e2a6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e705e1dce26e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=98c488c9-b640-4da6-939b-4ae7b07b3478"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3462404a-d93a-4f63-9ebc-6c7f440ea30a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9556fbbf1482fea39f704afebd0f20f2492618ad4f2d293cad091454e6164eff"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-589b59.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/76adc5f8-d471-49b3-99b5-b747eb4d19ad",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T04:32:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"daf8c835-11f7-49ee-9c75-e9163bb9e2a6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:32:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"daf8c835-11f7-49ee-9c75-e9163bb9e2a6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:32:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"daf8c835-11f7-49ee-9c75-e9163bb9e2a6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-589b59/auth-test-model-589b59\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:32:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"daf8c835-11f7-49ee-9c75-e9163bb9e2a6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-09T04:32:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"daf8c835-11f7-49ee-9c75-e9163bb9e2a6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T04:32:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"daf8c835-11f7-49ee-9c75-e9163bb9e2a6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-09T04:32:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"daf8c835-11f7-49ee-9c75-e9163bb9e2a6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T04:32:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"daf8c835-11f7-49ee-9c75-e9163bb9e2a6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T04:32:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"011435fe-c60a-4c7e-937d-3b86065ecb0c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:40738","PortSpecifier":{"PortValue":40738}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"011435fe-c60a-4c7e-937d-3b86065ecb0c","method":"GET","path":"/maas-api/v1/api-keys/76adc5f8-d471-49b3-99b5-b747eb4d19ad","host":"e2e-shared-a-6bd312.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T04:32:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"011435fe-c60a-4c7e-937d-3b86065ecb0c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:40738","PortSpecifier":{"PortValue":40738}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783571556,"nanos":974072441},"http":{"id":"011435fe-c60a-4c7e-937d-3b86065ecb0c","method":"GET","headers":{":authority":"e2e-shared-a-6bd312.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/76adc5f8-d471-49b3-99b5-b747eb4d19ad",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T04:32:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"011435fe-c60a-4c7e-937d-3b86065ecb0c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-09T04:32:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"011435fe-c60a-4c7e-937d-3b86065ecb0c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3462404a-d93a-4f63-9ebc-6c7f440ea30a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=98c488c9-b640-4da6-939b-4ae7b07b3478"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e705e1dce26e"]}} {"level":"debug","ts":"2026-07-09T04:32:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"011435fe-c60a-4c7e-937d-3b86065ecb0c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e705e1dce26e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=98c488c9-b640-4da6-939b-4ae7b07b3478"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3462404a-d93a-4f63-9ebc-6c7f440ea30a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0efe2b4768a44f8324e865b5777735eaabae17774e28c67ace4220c24847f863"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6bd312.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/76adc5f8-d471-49b3-99b5-b747eb4d19ad",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T04:32:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"011435fe-c60a-4c7e-937d-3b86065ecb0c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:32:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"011435fe-c60a-4c7e-937d-3b86065ecb0c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:32:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"011435fe-c60a-4c7e-937d-3b86065ecb0c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6bd312/auth-test-model-6bd312\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:32:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"011435fe-c60a-4c7e-937d-3b86065ecb0c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-09T04:32:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"011435fe-c60a-4c7e-937d-3b86065ecb0c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-09T04:32:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"011435fe-c60a-4c7e-937d-3b86065ecb0c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-09T04:32:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"011435fe-c60a-4c7e-937d-3b86065ecb0c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T04:32:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"011435fe-c60a-4c7e-937d-3b86065ecb0c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T04:32:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"06c014e0-e5ad-4a35-b244-95cb776b6535","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:50908","PortSpecifier":{"PortValue":50908}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"06c014e0-e5ad-4a35-b244-95cb776b6535","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6bd312.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T04:32:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"06c014e0-e5ad-4a35-b244-95cb776b6535","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:50908","PortSpecifier":{"PortValue":50908}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783571576,"nanos":100623904},"http":{"id":"06c014e0-e5ad-4a35-b244-95cb776b6535","method":"POST","headers":{":authority":"e2e-shared-a-6bd312.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T04:32:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"06c014e0-e5ad-4a35-b244-95cb776b6535","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-09T04:32:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"06c014e0-e5ad-4a35-b244-95cb776b6535","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3462404a-d93a-4f63-9ebc-6c7f440ea30a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=98c488c9-b640-4da6-939b-4ae7b07b3478"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e705e1dce26e"]}} {"level":"debug","ts":"2026-07-09T04:32:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"06c014e0-e5ad-4a35-b244-95cb776b6535","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e705e1dce26e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=98c488c9-b640-4da6-939b-4ae7b07b3478"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3462404a-d93a-4f63-9ebc-6c7f440ea30a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0efe2b4768a44f8324e865b5777735eaabae17774e28c67ace4220c24847f863"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6bd312.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T04:32:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06c014e0-e5ad-4a35-b244-95cb776b6535","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:32:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06c014e0-e5ad-4a35-b244-95cb776b6535","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:32:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06c014e0-e5ad-4a35-b244-95cb776b6535","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6bd312/auth-test-model-6bd312\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:32:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"06c014e0-e5ad-4a35-b244-95cb776b6535","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-09T04:32:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"06c014e0-e5ad-4a35-b244-95cb776b6535","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T04:32:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"06c014e0-e5ad-4a35-b244-95cb776b6535","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-09T04:32:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"06c014e0-e5ad-4a35-b244-95cb776b6535","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T04:32:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"06c014e0-e5ad-4a35-b244-95cb776b6535","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T04:32:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4cf7b257-7150-48d5-b446-4eda866a88a3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56948","PortSpecifier":{"PortValue":56948}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4cf7b257-7150-48d5-b446-4eda866a88a3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-589b59.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T04:32:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4cf7b257-7150-48d5-b446-4eda866a88a3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56948","PortSpecifier":{"PortValue":56948}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783571576,"nanos":134691139},"http":{"id":"4cf7b257-7150-48d5-b446-4eda866a88a3","method":"POST","headers":{":authority":"e2e-shared-b-589b59.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T04:32:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4cf7b257-7150-48d5-b446-4eda866a88a3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-09T04:32:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4cf7b257-7150-48d5-b446-4eda866a88a3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3462404a-d93a-4f63-9ebc-6c7f440ea30a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=98c488c9-b640-4da6-939b-4ae7b07b3478"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e705e1dce26e"]}} {"level":"debug","ts":"2026-07-09T04:32:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4cf7b257-7150-48d5-b446-4eda866a88a3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e705e1dce26e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=98c488c9-b640-4da6-939b-4ae7b07b3478"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3462404a-d93a-4f63-9ebc-6c7f440ea30a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9556fbbf1482fea39f704afebd0f20f2492618ad4f2d293cad091454e6164eff"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-589b59.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T04:32:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4cf7b257-7150-48d5-b446-4eda866a88a3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:32:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4cf7b257-7150-48d5-b446-4eda866a88a3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:32:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4cf7b257-7150-48d5-b446-4eda866a88a3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-589b59/auth-test-model-589b59\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:32:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4cf7b257-7150-48d5-b446-4eda866a88a3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-09T04:32:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4cf7b257-7150-48d5-b446-4eda866a88a3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-09T04:32:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4cf7b257-7150-48d5-b446-4eda866a88a3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-09T04:32:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4cf7b257-7150-48d5-b446-4eda866a88a3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T04:32:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4cf7b257-7150-48d5-b446-4eda866a88a3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T04:32:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e7faef29-d711-458f-915e-0c61ea2dbdcb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:50924","PortSpecifier":{"PortValue":50924}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e7faef29-d711-458f-915e-0c61ea2dbdcb","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-6bd312.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T04:32:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e7faef29-d711-458f-915e-0c61ea2dbdcb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:50924","PortSpecifier":{"PortValue":50924}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783571576,"nanos":171937804},"http":{"id":"e7faef29-d711-458f-915e-0c61ea2dbdcb","method":"POST","headers":{":authority":"e2e-shared-a-6bd312.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T04:32:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e7faef29-d711-458f-915e-0c61ea2dbdcb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-HWdKUMdpSTArKEhO_goGateWsaw3BkZ57um3nSjCRvnPUjpAkbl99yOzXGPC"} {"level":"debug","ts":"2026-07-09T04:32:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e7faef29-d711-458f-915e-0c61ea2dbdcb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6bd312.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-HWdKUMdpSTArKEhO_goGateWsaw3BkZ57um3nSjCRvnPUjpAkbl99yOzXGPC\"}"} {"level":"debug","ts":"2026-07-09T04:32:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e7faef29-d711-458f-915e-0c61ea2dbdcb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6bd312.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f8dd813e-72fc-4833-af17-a407a1687665","keyName":"e2e-auth-iso-a-6a8484","subscription":"e2e-auth-iso-25822c","tenant":"e2e-shared-a-6bd312","userId":"f8dd813e-72fc-4833-af17-a407a1687665","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-09T04:32:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e7faef29-d711-458f-915e-0c61ea2dbdcb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T04:32:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7faef29-d711-458f-915e-0c61ea2dbdcb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:32:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7faef29-d711-458f-915e-0c61ea2dbdcb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:32:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7faef29-d711-458f-915e-0c61ea2dbdcb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6bd312/auth-test-model-6bd312\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:32:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7faef29-d711-458f-915e-0c61ea2dbdcb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T04:32:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7faef29-d711-458f-915e-0c61ea2dbdcb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-25822c"} {"level":"debug","ts":"2026-07-09T04:32:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7faef29-d711-458f-915e-0c61ea2dbdcb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-09T04:32:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e7faef29-d711-458f-915e-0c61ea2dbdcb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-09T04:32:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e7faef29-d711-458f-915e-0c61ea2dbdcb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T04:32:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e7faef29-d711-458f-915e-0c61ea2dbdcb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T04:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/612f0e59eaa946bed08167944b6a1337d80eb7abb318e135637bd7ba3d75e9d3"} {"level":"info","ts":"2026-07-09T04:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d70afc6b3e7c547357b64b0a84086011135dcf5bc732eefcf4dc428f15328246"} {"level":"info","ts":"2026-07-09T04:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/521b8558303b4c9c5df467a426e1d5f57bb7591821eb81f34f28d79aad02504c"} {"level":"info","ts":"2026-07-09T04:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ad2337102b41b40104d58bf95d0cbd5130ad7c042b49fdc7d672ff5634613e8d"} {"level":"info","ts":"2026-07-09T04:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ba3d5b894488ac784ff66c1cf64a769a8d5742899f35b5816830941790a3bfcd"} {"level":"info","ts":"2026-07-09T04:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/36aa9d55297d04c7916d51ad016b6e74874add4b63ec2166f92528e9db32b517"} {"level":"info","ts":"2026-07-09T04:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/643ad64ed783fee7b9ca5a19db4019a4c089a63f529665ee799b5f4d55b56123"} {"level":"info","ts":"2026-07-09T04:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f0d28f1bd520107ccff686e1c71cef42ab65201f89b937ae2c2e189f963403c"} {"level":"info","ts":"2026-07-09T04:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a8a4cce062019ee170976857b7bacd8b27d3447839fd6db4bc1b77c415c9c16a"} {"level":"info","ts":"2026-07-09T04:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eaea011717ca297d05abe1282ff777328741e47c2cabd5b9f3deca8cb36741c6"} {"level":"info","ts":"2026-07-09T04:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b5aeaa433c149a213ee3c1ffdb26593c403604f8f411b8919fa3091fa2d1fc01"} {"level":"info","ts":"2026-07-09T04:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b0871bbffffce2f8e1cf6cb489ec35df43e3e4c4c7e5ba45f73ec6abc72dbe67"} {"level":"info","ts":"2026-07-09T04:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/21b11fe79d598ce0eeace7300f3fff02e0904a04f3442ce66e25f87995124f1f"} {"level":"info","ts":"2026-07-09T04:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a23b614c4ed3582fe582bc875d4b8fb19fbda0bcdd02fa60bc291bbfb99f19c8"} {"level":"info","ts":"2026-07-09T04:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c3b29a21a2f350affe25aea67a0b1637002d133dd6cc2e5ef5c7adb01726e53d"} {"level":"info","ts":"2026-07-09T04:33:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2d5229e4fb78bb477f9161a49af9b62231c07bfb60f302d29591820d4c1ddf08"} {"level":"debug","ts":"2026-07-09T04:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ac51321161cf7cc271fbe7c0ff5b3e077c1dd51c4f450ae5979f52357e5004b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:33:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:33:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ac51321161cf7cc271fbe7c0ff5b3e077c1dd51c4f450ae5979f52357e5004b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac51321161cf7cc271fbe7c0ff5b3e077c1dd51c4f450ae5979f52357e5004b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac51321161cf7cc271fbe7c0ff5b3e077c1dd51c4f450ae5979f52357e5004b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ac51321161cf7cc271fbe7c0ff5b3e077c1dd51c4f450ae5979f52357e5004b"} {"level":"debug","ts":"2026-07-09T04:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac51321161cf7cc271fbe7c0ff5b3e077c1dd51c4f450ae5979f52357e5004b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ac51321161cf7cc271fbe7c0ff5b3e077c1dd51c4f450ae5979f52357e5004b"} {"level":"debug","ts":"2026-07-09T04:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ac51321161cf7cc271fbe7c0ff5b3e077c1dd51c4f450ae5979f52357e5004b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:33:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:33:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ac51321161cf7cc271fbe7c0ff5b3e077c1dd51c4f450ae5979f52357e5004b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ac51321161cf7cc271fbe7c0ff5b3e077c1dd51c4f450ae5979f52357e5004b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ac51321161cf7cc271fbe7c0ff5b3e077c1dd51c4f450ae5979f52357e5004b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:33:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:33:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ac51321161cf7cc271fbe7c0ff5b3e077c1dd51c4f450ae5979f52357e5004b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac51321161cf7cc271fbe7c0ff5b3e077c1dd51c4f450ae5979f52357e5004b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac51321161cf7cc271fbe7c0ff5b3e077c1dd51c4f450ae5979f52357e5004b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ac51321161cf7cc271fbe7c0ff5b3e077c1dd51c4f450ae5979f52357e5004b"} {"level":"debug","ts":"2026-07-09T04:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac51321161cf7cc271fbe7c0ff5b3e077c1dd51c4f450ae5979f52357e5004b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ac51321161cf7cc271fbe7c0ff5b3e077c1dd51c4f450ae5979f52357e5004b"} {"level":"debug","ts":"2026-07-09T04:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ac51321161cf7cc271fbe7c0ff5b3e077c1dd51c4f450ae5979f52357e5004b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:33:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:33:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ac51321161cf7cc271fbe7c0ff5b3e077c1dd51c4f450ae5979f52357e5004b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ac51321161cf7cc271fbe7c0ff5b3e077c1dd51c4f450ae5979f52357e5004b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ac51321161cf7cc271fbe7c0ff5b3e077c1dd51c4f450ae5979f52357e5004b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:33:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:33:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ac51321161cf7cc271fbe7c0ff5b3e077c1dd51c4f450ae5979f52357e5004b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac51321161cf7cc271fbe7c0ff5b3e077c1dd51c4f450ae5979f52357e5004b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac51321161cf7cc271fbe7c0ff5b3e077c1dd51c4f450ae5979f52357e5004b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ac51321161cf7cc271fbe7c0ff5b3e077c1dd51c4f450ae5979f52357e5004b"} {"level":"debug","ts":"2026-07-09T04:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac51321161cf7cc271fbe7c0ff5b3e077c1dd51c4f450ae5979f52357e5004b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ac51321161cf7cc271fbe7c0ff5b3e077c1dd51c4f450ae5979f52357e5004b"} {"level":"debug","ts":"2026-07-09T04:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ac51321161cf7cc271fbe7c0ff5b3e077c1dd51c4f450ae5979f52357e5004b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:33:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:33:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ac51321161cf7cc271fbe7c0ff5b3e077c1dd51c4f450ae5979f52357e5004b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ac51321161cf7cc271fbe7c0ff5b3e077c1dd51c4f450ae5979f52357e5004b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ac51321161cf7cc271fbe7c0ff5b3e077c1dd51c4f450ae5979f52357e5004b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:33:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:33:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ac51321161cf7cc271fbe7c0ff5b3e077c1dd51c4f450ae5979f52357e5004b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac51321161cf7cc271fbe7c0ff5b3e077c1dd51c4f450ae5979f52357e5004b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac51321161cf7cc271fbe7c0ff5b3e077c1dd51c4f450ae5979f52357e5004b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ac51321161cf7cc271fbe7c0ff5b3e077c1dd51c4f450ae5979f52357e5004b"} {"level":"debug","ts":"2026-07-09T04:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac51321161cf7cc271fbe7c0ff5b3e077c1dd51c4f450ae5979f52357e5004b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ac51321161cf7cc271fbe7c0ff5b3e077c1dd51c4f450ae5979f52357e5004b"} {"level":"debug","ts":"2026-07-09T04:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ac51321161cf7cc271fbe7c0ff5b3e077c1dd51c4f450ae5979f52357e5004b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:33:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:33:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ac51321161cf7cc271fbe7c0ff5b3e077c1dd51c4f450ae5979f52357e5004b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ac51321161cf7cc271fbe7c0ff5b3e077c1dd51c4f450ae5979f52357e5004b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ac51321161cf7cc271fbe7c0ff5b3e077c1dd51c4f450ae5979f52357e5004b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:33:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:33:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ac51321161cf7cc271fbe7c0ff5b3e077c1dd51c4f450ae5979f52357e5004b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"358040bc55247ad0bc283aa95f5e08065dcc79afb78135c369e39919e205ff3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:33:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:33:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"358040bc55247ad0bc283aa95f5e08065dcc79afb78135c369e39919e205ff3f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac51321161cf7cc271fbe7c0ff5b3e077c1dd51c4f450ae5979f52357e5004b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"358040bc55247ad0bc283aa95f5e08065dcc79afb78135c369e39919e205ff3f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ac51321161cf7cc271fbe7c0ff5b3e077c1dd51c4f450ae5979f52357e5004b"} {"level":"debug","ts":"2026-07-09T04:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"358040bc55247ad0bc283aa95f5e08065dcc79afb78135c369e39919e205ff3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:33:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:33:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"358040bc55247ad0bc283aa95f5e08065dcc79afb78135c369e39919e205ff3f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ac51321161cf7cc271fbe7c0ff5b3e077c1dd51c4f450ae5979f52357e5004b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:33:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:33:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ac51321161cf7cc271fbe7c0ff5b3e077c1dd51c4f450ae5979f52357e5004b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/358040bc55247ad0bc283aa95f5e08065dcc79afb78135c369e39919e205ff3f"} {"level":"info","ts":"2026-07-09T04:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ac51321161cf7cc271fbe7c0ff5b3e077c1dd51c4f450ae5979f52357e5004b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"358040bc55247ad0bc283aa95f5e08065dcc79afb78135c369e39919e205ff3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:33:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:33:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["358040bc55247ad0bc283aa95f5e08065dcc79afb78135c369e39919e205ff3f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"358040bc55247ad0bc283aa95f5e08065dcc79afb78135c369e39919e205ff3f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ac51321161cf7cc271fbe7c0ff5b3e077c1dd51c4f450ae5979f52357e5004b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:33:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:33:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ac51321161cf7cc271fbe7c0ff5b3e077c1dd51c4f450ae5979f52357e5004b"} {"level":"info","ts":"2026-07-09T04:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ac51321161cf7cc271fbe7c0ff5b3e077c1dd51c4f450ae5979f52357e5004b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"358040bc55247ad0bc283aa95f5e08065dcc79afb78135c369e39919e205ff3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:33:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:33:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"358040bc55247ad0bc283aa95f5e08065dcc79afb78135c369e39919e205ff3f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ac51321161cf7cc271fbe7c0ff5b3e077c1dd51c4f450ae5979f52357e5004b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:33:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:33:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ac51321161cf7cc271fbe7c0ff5b3e077c1dd51c4f450ae5979f52357e5004b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ac51321161cf7cc271fbe7c0ff5b3e077c1dd51c4f450ae5979f52357e5004b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"358040bc55247ad0bc283aa95f5e08065dcc79afb78135c369e39919e205ff3f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac51321161cf7cc271fbe7c0ff5b3e077c1dd51c4f450ae5979f52357e5004b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/358040bc55247ad0bc283aa95f5e08065dcc79afb78135c369e39919e205ff3f"} {"level":"debug","ts":"2026-07-09T04:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"358040bc55247ad0bc283aa95f5e08065dcc79afb78135c369e39919e205ff3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:33:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:33:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["358040bc55247ad0bc283aa95f5e08065dcc79afb78135c369e39919e205ff3f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"358040bc55247ad0bc283aa95f5e08065dcc79afb78135c369e39919e205ff3f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"358040bc55247ad0bc283aa95f5e08065dcc79afb78135c369e39919e205ff3f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ac51321161cf7cc271fbe7c0ff5b3e077c1dd51c4f450ae5979f52357e5004b"} {"level":"info","ts":"2026-07-09T04:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/358040bc55247ad0bc283aa95f5e08065dcc79afb78135c369e39919e205ff3f"} {"level":"debug","ts":"2026-07-09T04:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a89deb4adb2109a804ba3a0599b1e49a4cc2bc1a61dacb3f67febb49a398f22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:33:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:33:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a89deb4adb2109a804ba3a0599b1e49a4cc2bc1a61dacb3f67febb49a398f22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a89deb4adb2109a804ba3a0599b1e49a4cc2bc1a61dacb3f67febb49a398f22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a89deb4adb2109a804ba3a0599b1e49a4cc2bc1a61dacb3f67febb49a398f22","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a89deb4adb2109a804ba3a0599b1e49a4cc2bc1a61dacb3f67febb49a398f22"} {"level":"debug","ts":"2026-07-09T04:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a89deb4adb2109a804ba3a0599b1e49a4cc2bc1a61dacb3f67febb49a398f22","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a89deb4adb2109a804ba3a0599b1e49a4cc2bc1a61dacb3f67febb49a398f22"} {"level":"debug","ts":"2026-07-09T04:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a89deb4adb2109a804ba3a0599b1e49a4cc2bc1a61dacb3f67febb49a398f22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:33:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:33:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a89deb4adb2109a804ba3a0599b1e49a4cc2bc1a61dacb3f67febb49a398f22"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a89deb4adb2109a804ba3a0599b1e49a4cc2bc1a61dacb3f67febb49a398f22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a89deb4adb2109a804ba3a0599b1e49a4cc2bc1a61dacb3f67febb49a398f22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:33:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:33:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a89deb4adb2109a804ba3a0599b1e49a4cc2bc1a61dacb3f67febb49a398f22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b80a443e849fc931c57c6f983005c1dd4ebd47abb119b869cf7732a051f1178a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:33:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:33:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a89deb4adb2109a804ba3a0599b1e49a4cc2bc1a61dacb3f67febb49a398f22"} {"level":"info","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b80a443e849fc931c57c6f983005c1dd4ebd47abb119b869cf7732a051f1178a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a89deb4adb2109a804ba3a0599b1e49a4cc2bc1a61dacb3f67febb49a398f22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:33:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:33:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a89deb4adb2109a804ba3a0599b1e49a4cc2bc1a61dacb3f67febb49a398f22"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a89deb4adb2109a804ba3a0599b1e49a4cc2bc1a61dacb3f67febb49a398f22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b80a443e849fc931c57c6f983005c1dd4ebd47abb119b869cf7732a051f1178a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:33:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:33:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b80a443e849fc931c57c6f983005c1dd4ebd47abb119b869cf7732a051f1178a"} {"level":"info","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b80a443e849fc931c57c6f983005c1dd4ebd47abb119b869cf7732a051f1178a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a89deb4adb2109a804ba3a0599b1e49a4cc2bc1a61dacb3f67febb49a398f22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:33:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:33:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a89deb4adb2109a804ba3a0599b1e49a4cc2bc1a61dacb3f67febb49a398f22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b80a443e849fc931c57c6f983005c1dd4ebd47abb119b869cf7732a051f1178a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:33:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:33:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b80a443e849fc931c57c6f983005c1dd4ebd47abb119b869cf7732a051f1178a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a89deb4adb2109a804ba3a0599b1e49a4cc2bc1a61dacb3f67febb49a398f22"} {"level":"info","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b80a443e849fc931c57c6f983005c1dd4ebd47abb119b869cf7732a051f1178a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a89deb4adb2109a804ba3a0599b1e49a4cc2bc1a61dacb3f67febb49a398f22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:33:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:33:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a89deb4adb2109a804ba3a0599b1e49a4cc2bc1a61dacb3f67febb49a398f22"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b80a443e849fc931c57c6f983005c1dd4ebd47abb119b869cf7732a051f1178a"} {"level":"info","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a89deb4adb2109a804ba3a0599b1e49a4cc2bc1a61dacb3f67febb49a398f22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b80a443e849fc931c57c6f983005c1dd4ebd47abb119b869cf7732a051f1178a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a89deb4adb2109a804ba3a0599b1e49a4cc2bc1a61dacb3f67febb49a398f22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:33:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:33:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a89deb4adb2109a804ba3a0599b1e49a4cc2bc1a61dacb3f67febb49a398f22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a89deb4adb2109a804ba3a0599b1e49a4cc2bc1a61dacb3f67febb49a398f22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a89deb4adb2109a804ba3a0599b1e49a4cc2bc1a61dacb3f67febb49a398f22","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a89deb4adb2109a804ba3a0599b1e49a4cc2bc1a61dacb3f67febb49a398f22"} {"level":"debug","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a89deb4adb2109a804ba3a0599b1e49a4cc2bc1a61dacb3f67febb49a398f22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:33:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:33:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a89deb4adb2109a804ba3a0599b1e49a4cc2bc1a61dacb3f67febb49a398f22"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b80a443e849fc931c57c6f983005c1dd4ebd47abb119b869cf7732a051f1178a"} {"level":"info","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a89deb4adb2109a804ba3a0599b1e49a4cc2bc1a61dacb3f67febb49a398f22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a89deb4adb2109a804ba3a0599b1e49a4cc2bc1a61dacb3f67febb49a398f22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:33:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:33:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a89deb4adb2109a804ba3a0599b1e49a4cc2bc1a61dacb3f67febb49a398f22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a89deb4adb2109a804ba3a0599b1e49a4cc2bc1a61dacb3f67febb49a398f22","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a89deb4adb2109a804ba3a0599b1e49a4cc2bc1a61dacb3f67febb49a398f22"} {"level":"debug","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a89deb4adb2109a804ba3a0599b1e49a4cc2bc1a61dacb3f67febb49a398f22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a89deb4adb2109a804ba3a0599b1e49a4cc2bc1a61dacb3f67febb49a398f22","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a89deb4adb2109a804ba3a0599b1e49a4cc2bc1a61dacb3f67febb49a398f22"} {"level":"debug","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ef3dfb3ddb0fa80d71ccb5e6269b1e94308a9e31bf1387a7e21f38191bdb252","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:33:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:33:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ef3dfb3ddb0fa80d71ccb5e6269b1e94308a9e31bf1387a7e21f38191bdb252","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ef3dfb3ddb0fa80d71ccb5e6269b1e94308a9e31bf1387a7e21f38191bdb252","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ef3dfb3ddb0fa80d71ccb5e6269b1e94308a9e31bf1387a7e21f38191bdb252","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ef3dfb3ddb0fa80d71ccb5e6269b1e94308a9e31bf1387a7e21f38191bdb252"} {"level":"debug","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a89deb4adb2109a804ba3a0599b1e49a4cc2bc1a61dacb3f67febb49a398f22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:33:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:33:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a89deb4adb2109a804ba3a0599b1e49a4cc2bc1a61dacb3f67febb49a398f22"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ef3dfb3ddb0fa80d71ccb5e6269b1e94308a9e31bf1387a7e21f38191bdb252"} {"level":"info","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a89deb4adb2109a804ba3a0599b1e49a4cc2bc1a61dacb3f67febb49a398f22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ef3dfb3ddb0fa80d71ccb5e6269b1e94308a9e31bf1387a7e21f38191bdb252","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:33:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:33:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ef3dfb3ddb0fa80d71ccb5e6269b1e94308a9e31bf1387a7e21f38191bdb252"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ef3dfb3ddb0fa80d71ccb5e6269b1e94308a9e31bf1387a7e21f38191bdb252","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a89deb4adb2109a804ba3a0599b1e49a4cc2bc1a61dacb3f67febb49a398f22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:33:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:33:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a89deb4adb2109a804ba3a0599b1e49a4cc2bc1a61dacb3f67febb49a398f22"} {"level":"info","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a89deb4adb2109a804ba3a0599b1e49a4cc2bc1a61dacb3f67febb49a398f22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ef3dfb3ddb0fa80d71ccb5e6269b1e94308a9e31bf1387a7e21f38191bdb252","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:33:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:33:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ef3dfb3ddb0fa80d71ccb5e6269b1e94308a9e31bf1387a7e21f38191bdb252","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a89deb4adb2109a804ba3a0599b1e49a4cc2bc1a61dacb3f67febb49a398f22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:33:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:33:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a89deb4adb2109a804ba3a0599b1e49a4cc2bc1a61dacb3f67febb49a398f22"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ef3dfb3ddb0fa80d71ccb5e6269b1e94308a9e31bf1387a7e21f38191bdb252"} {"level":"info","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a89deb4adb2109a804ba3a0599b1e49a4cc2bc1a61dacb3f67febb49a398f22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ef3dfb3ddb0fa80d71ccb5e6269b1e94308a9e31bf1387a7e21f38191bdb252","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:33:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:33:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ef3dfb3ddb0fa80d71ccb5e6269b1e94308a9e31bf1387a7e21f38191bdb252"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ef3dfb3ddb0fa80d71ccb5e6269b1e94308a9e31bf1387a7e21f38191bdb252","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a89deb4adb2109a804ba3a0599b1e49a4cc2bc1a61dacb3f67febb49a398f22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:33:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:33:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a89deb4adb2109a804ba3a0599b1e49a4cc2bc1a61dacb3f67febb49a398f22"} {"level":"info","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a89deb4adb2109a804ba3a0599b1e49a4cc2bc1a61dacb3f67febb49a398f22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ef3dfb3ddb0fa80d71ccb5e6269b1e94308a9e31bf1387a7e21f38191bdb252","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:33:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:33:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ef3dfb3ddb0fa80d71ccb5e6269b1e94308a9e31bf1387a7e21f38191bdb252","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a89deb4adb2109a804ba3a0599b1e49a4cc2bc1a61dacb3f67febb49a398f22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:33:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:33:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a89deb4adb2109a804ba3a0599b1e49a4cc2bc1a61dacb3f67febb49a398f22"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ef3dfb3ddb0fa80d71ccb5e6269b1e94308a9e31bf1387a7e21f38191bdb252"} {"level":"info","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a89deb4adb2109a804ba3a0599b1e49a4cc2bc1a61dacb3f67febb49a398f22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ef3dfb3ddb0fa80d71ccb5e6269b1e94308a9e31bf1387a7e21f38191bdb252","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:33:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:33:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ef3dfb3ddb0fa80d71ccb5e6269b1e94308a9e31bf1387a7e21f38191bdb252"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a89deb4adb2109a804ba3a0599b1e49a4cc2bc1a61dacb3f67febb49a398f22"} {"level":"info","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ef3dfb3ddb0fa80d71ccb5e6269b1e94308a9e31bf1387a7e21f38191bdb252","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a89deb4adb2109a804ba3a0599b1e49a4cc2bc1a61dacb3f67febb49a398f22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ef3dfb3ddb0fa80d71ccb5e6269b1e94308a9e31bf1387a7e21f38191bdb252","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:33:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:33:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ef3dfb3ddb0fa80d71ccb5e6269b1e94308a9e31bf1387a7e21f38191bdb252","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ef3dfb3ddb0fa80d71ccb5e6269b1e94308a9e31bf1387a7e21f38191bdb252","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ef3dfb3ddb0fa80d71ccb5e6269b1e94308a9e31bf1387a7e21f38191bdb252"} {"level":"debug","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ef3dfb3ddb0fa80d71ccb5e6269b1e94308a9e31bf1387a7e21f38191bdb252","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:33:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:33:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ef3dfb3ddb0fa80d71ccb5e6269b1e94308a9e31bf1387a7e21f38191bdb252"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ef3dfb3ddb0fa80d71ccb5e6269b1e94308a9e31bf1387a7e21f38191bdb252","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abc17050740f199dd8773f630dafeeebbcb7397b8043ad844d70e2d74fed432e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:33:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:33:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a89deb4adb2109a804ba3a0599b1e49a4cc2bc1a61dacb3f67febb49a398f22"} {"level":"info","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abc17050740f199dd8773f630dafeeebbcb7397b8043ad844d70e2d74fed432e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ef3dfb3ddb0fa80d71ccb5e6269b1e94308a9e31bf1387a7e21f38191bdb252","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:33:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:33:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ef3dfb3ddb0fa80d71ccb5e6269b1e94308a9e31bf1387a7e21f38191bdb252"} {"level":"info","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ef3dfb3ddb0fa80d71ccb5e6269b1e94308a9e31bf1387a7e21f38191bdb252","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abc17050740f199dd8773f630dafeeebbcb7397b8043ad844d70e2d74fed432e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:33:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:33:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abc17050740f199dd8773f630dafeeebbcb7397b8043ad844d70e2d74fed432e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ef3dfb3ddb0fa80d71ccb5e6269b1e94308a9e31bf1387a7e21f38191bdb252","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:33:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:33:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ef3dfb3ddb0fa80d71ccb5e6269b1e94308a9e31bf1387a7e21f38191bdb252"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abc17050740f199dd8773f630dafeeebbcb7397b8043ad844d70e2d74fed432e"} {"level":"info","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ef3dfb3ddb0fa80d71ccb5e6269b1e94308a9e31bf1387a7e21f38191bdb252","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abc17050740f199dd8773f630dafeeebbcb7397b8043ad844d70e2d74fed432e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:33:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:33:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["abc17050740f199dd8773f630dafeeebbcb7397b8043ad844d70e2d74fed432e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ef3dfb3ddb0fa80d71ccb5e6269b1e94308a9e31bf1387a7e21f38191bdb252"} {"level":"info","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abc17050740f199dd8773f630dafeeebbcb7397b8043ad844d70e2d74fed432e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ef3dfb3ddb0fa80d71ccb5e6269b1e94308a9e31bf1387a7e21f38191bdb252","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abc17050740f199dd8773f630dafeeebbcb7397b8043ad844d70e2d74fed432e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:33:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:33:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abc17050740f199dd8773f630dafeeebbcb7397b8043ad844d70e2d74fed432e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"abc17050740f199dd8773f630dafeeebbcb7397b8043ad844d70e2d74fed432e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"abc17050740f199dd8773f630dafeeebbcb7397b8043ad844d70e2d74fed432e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abc17050740f199dd8773f630dafeeebbcb7397b8043ad844d70e2d74fed432e"} {"level":"debug","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abc17050740f199dd8773f630dafeeebbcb7397b8043ad844d70e2d74fed432e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:33:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:33:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["abc17050740f199dd8773f630dafeeebbcb7397b8043ad844d70e2d74fed432e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ef3dfb3ddb0fa80d71ccb5e6269b1e94308a9e31bf1387a7e21f38191bdb252"} {"level":"info","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abc17050740f199dd8773f630dafeeebbcb7397b8043ad844d70e2d74fed432e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abc17050740f199dd8773f630dafeeebbcb7397b8043ad844d70e2d74fed432e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:33:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:33:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abc17050740f199dd8773f630dafeeebbcb7397b8043ad844d70e2d74fed432e"} {"level":"info","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abc17050740f199dd8773f630dafeeebbcb7397b8043ad844d70e2d74fed432e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"abc17050740f199dd8773f630dafeeebbcb7397b8043ad844d70e2d74fed432e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"abc17050740f199dd8773f630dafeeebbcb7397b8043ad844d70e2d74fed432e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abc17050740f199dd8773f630dafeeebbcb7397b8043ad844d70e2d74fed432e"} {"level":"debug","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"abc17050740f199dd8773f630dafeeebbcb7397b8043ad844d70e2d74fed432e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d5351643110f7d721e5ceb1e4ee793f82764bd2df4a9c71f65bead2bf643773","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:33:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:33:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abc17050740f199dd8773f630dafeeebbcb7397b8043ad844d70e2d74fed432e"} {"level":"info","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d5351643110f7d721e5ceb1e4ee793f82764bd2df4a9c71f65bead2bf643773","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"487647523f16369fb7e71ad8ffca193be357649b430f584323fccda9b7b7ce8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:33:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:33:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d5351643110f7d721e5ceb1e4ee793f82764bd2df4a9c71f65bead2bf643773"} {"level":"info","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"487647523f16369fb7e71ad8ffca193be357649b430f584323fccda9b7b7ce8e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d5351643110f7d721e5ceb1e4ee793f82764bd2df4a9c71f65bead2bf643773","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:33:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:33:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d5351643110f7d721e5ceb1e4ee793f82764bd2df4a9c71f65bead2bf643773"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/487647523f16369fb7e71ad8ffca193be357649b430f584323fccda9b7b7ce8e"} {"level":"info","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d5351643110f7d721e5ceb1e4ee793f82764bd2df4a9c71f65bead2bf643773","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abc17050740f199dd8773f630dafeeebbcb7397b8043ad844d70e2d74fed432e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:33:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:33:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["abc17050740f199dd8773f630dafeeebbcb7397b8043ad844d70e2d74fed432e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abc17050740f199dd8773f630dafeeebbcb7397b8043ad844d70e2d74fed432e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"487647523f16369fb7e71ad8ffca193be357649b430f584323fccda9b7b7ce8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:33:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:33:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["487647523f16369fb7e71ad8ffca193be357649b430f584323fccda9b7b7ce8e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d5351643110f7d721e5ceb1e4ee793f82764bd2df4a9c71f65bead2bf643773"} {"level":"info","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"487647523f16369fb7e71ad8ffca193be357649b430f584323fccda9b7b7ce8e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d5351643110f7d721e5ceb1e4ee793f82764bd2df4a9c71f65bead2bf643773","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"abc17050740f199dd8773f630dafeeebbcb7397b8043ad844d70e2d74fed432e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"487647523f16369fb7e71ad8ffca193be357649b430f584323fccda9b7b7ce8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:33:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:33:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"487647523f16369fb7e71ad8ffca193be357649b430f584323fccda9b7b7ce8e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"487647523f16369fb7e71ad8ffca193be357649b430f584323fccda9b7b7ce8e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/487647523f16369fb7e71ad8ffca193be357649b430f584323fccda9b7b7ce8e"} {"level":"debug","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"487647523f16369fb7e71ad8ffca193be357649b430f584323fccda9b7b7ce8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:33:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:33:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["487647523f16369fb7e71ad8ffca193be357649b430f584323fccda9b7b7ce8e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"487647523f16369fb7e71ad8ffca193be357649b430f584323fccda9b7b7ce8e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"487647523f16369fb7e71ad8ffca193be357649b430f584323fccda9b7b7ce8e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abc17050740f199dd8773f630dafeeebbcb7397b8043ad844d70e2d74fed432e"} {"level":"info","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d5351643110f7d721e5ceb1e4ee793f82764bd2df4a9c71f65bead2bf643773"} {"level":"info","ts":"2026-07-09T04:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/487647523f16369fb7e71ad8ffca193be357649b430f584323fccda9b7b7ce8e"} {"level":"debug","ts":"2026-07-09T04:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c85755fa2e4d9068cf6f60f6a5e0306f7d15fea271668d2b9965b51e464a92ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:34:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:34:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c85755fa2e4d9068cf6f60f6a5e0306f7d15fea271668d2b9965b51e464a92ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c85755fa2e4d9068cf6f60f6a5e0306f7d15fea271668d2b9965b51e464a92ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c85755fa2e4d9068cf6f60f6a5e0306f7d15fea271668d2b9965b51e464a92ee","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c85755fa2e4d9068cf6f60f6a5e0306f7d15fea271668d2b9965b51e464a92ee"} {"level":"debug","ts":"2026-07-09T04:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c85755fa2e4d9068cf6f60f6a5e0306f7d15fea271668d2b9965b51e464a92ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c85755fa2e4d9068cf6f60f6a5e0306f7d15fea271668d2b9965b51e464a92ee","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c85755fa2e4d9068cf6f60f6a5e0306f7d15fea271668d2b9965b51e464a92ee"} {"level":"debug","ts":"2026-07-09T04:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c85755fa2e4d9068cf6f60f6a5e0306f7d15fea271668d2b9965b51e464a92ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:34:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:34:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c85755fa2e4d9068cf6f60f6a5e0306f7d15fea271668d2b9965b51e464a92ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c85755fa2e4d9068cf6f60f6a5e0306f7d15fea271668d2b9965b51e464a92ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c85755fa2e4d9068cf6f60f6a5e0306f7d15fea271668d2b9965b51e464a92ee","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c85755fa2e4d9068cf6f60f6a5e0306f7d15fea271668d2b9965b51e464a92ee"} {"level":"debug","ts":"2026-07-09T04:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83d3b7193a8937c28b7a433f9e80d323e6ef676ef571736c5797e855ecddc053","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:34:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:34:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83d3b7193a8937c28b7a433f9e80d323e6ef676ef571736c5797e855ecddc053","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83d3b7193a8937c28b7a433f9e80d323e6ef676ef571736c5797e855ecddc053","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:34:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:34:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83d3b7193a8937c28b7a433f9e80d323e6ef676ef571736c5797e855ecddc053"} {"level":"info","ts":"2026-07-09T04:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83d3b7193a8937c28b7a433f9e80d323e6ef676ef571736c5797e855ecddc053","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83d3b7193a8937c28b7a433f9e80d323e6ef676ef571736c5797e855ecddc053","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:34:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:34:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-09T04:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"83d3b7193a8937c28b7a433f9e80d323e6ef676ef571736c5797e855ecddc053","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"83d3b7193a8937c28b7a433f9e80d323e6ef676ef571736c5797e855ecddc053\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-09T04:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83d3b7193a8937c28b7a433f9e80d323e6ef676ef571736c5797e855ecddc053","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83d3b7193a8937c28b7a433f9e80d323e6ef676ef571736c5797e855ecddc053","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83d3b7193a8937c28b7a433f9e80d323e6ef676ef571736c5797e855ecddc053"} {"level":"info","ts":"2026-07-09T04:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83d3b7193a8937c28b7a433f9e80d323e6ef676ef571736c5797e855ecddc053"} {"level":"debug","ts":"2026-07-09T04:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83d3b7193a8937c28b7a433f9e80d323e6ef676ef571736c5797e855ecddc053","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:34:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:34:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83d3b7193a8937c28b7a433f9e80d323e6ef676ef571736c5797e855ecddc053"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83d3b7193a8937c28b7a433f9e80d323e6ef676ef571736c5797e855ecddc053","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83d3b7193a8937c28b7a433f9e80d323e6ef676ef571736c5797e855ecddc053","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:34:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:34:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83d3b7193a8937c28b7a433f9e80d323e6ef676ef571736c5797e855ecddc053","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83d3b7193a8937c28b7a433f9e80d323e6ef676ef571736c5797e855ecddc053","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83d3b7193a8937c28b7a433f9e80d323e6ef676ef571736c5797e855ecddc053","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83d3b7193a8937c28b7a433f9e80d323e6ef676ef571736c5797e855ecddc053"} {"level":"debug","ts":"2026-07-09T04:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83d3b7193a8937c28b7a433f9e80d323e6ef676ef571736c5797e855ecddc053","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83d3b7193a8937c28b7a433f9e80d323e6ef676ef571736c5797e855ecddc053"} {"level":"debug","ts":"2026-07-09T04:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c8eddd73334838dcf6aab5a1deb87bffaae66432950cd7bdbe28aaa99fa09ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:34:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:34:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c8eddd73334838dcf6aab5a1deb87bffaae66432950cd7bdbe28aaa99fa09ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c8eddd73334838dcf6aab5a1deb87bffaae66432950cd7bdbe28aaa99fa09ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:34:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:34:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c8eddd73334838dcf6aab5a1deb87bffaae66432950cd7bdbe28aaa99fa09ef"} {"level":"info","ts":"2026-07-09T04:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c8eddd73334838dcf6aab5a1deb87bffaae66432950cd7bdbe28aaa99fa09ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83d3b7193a8937c28b7a433f9e80d323e6ef676ef571736c5797e855ecddc053","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:34:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:34:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83d3b7193a8937c28b7a433f9e80d323e6ef676ef571736c5797e855ecddc053"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83d3b7193a8937c28b7a433f9e80d323e6ef676ef571736c5797e855ecddc053","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c8eddd73334838dcf6aab5a1deb87bffaae66432950cd7bdbe28aaa99fa09ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83d3b7193a8937c28b7a433f9e80d323e6ef676ef571736c5797e855ecddc053","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c8eddd73334838dcf6aab5a1deb87bffaae66432950cd7bdbe28aaa99fa09ef"} {"level":"debug","ts":"2026-07-09T04:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c8eddd73334838dcf6aab5a1deb87bffaae66432950cd7bdbe28aaa99fa09ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:34:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:34:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c8eddd73334838dcf6aab5a1deb87bffaae66432950cd7bdbe28aaa99fa09ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83d3b7193a8937c28b7a433f9e80d323e6ef676ef571736c5797e855ecddc053"} {"level":"info","ts":"2026-07-09T04:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c8eddd73334838dcf6aab5a1deb87bffaae66432950cd7bdbe28aaa99fa09ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c8eddd73334838dcf6aab5a1deb87bffaae66432950cd7bdbe28aaa99fa09ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:34:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:34:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c8eddd73334838dcf6aab5a1deb87bffaae66432950cd7bdbe28aaa99fa09ef"} {"level":"info","ts":"2026-07-09T04:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c8eddd73334838dcf6aab5a1deb87bffaae66432950cd7bdbe28aaa99fa09ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c8eddd73334838dcf6aab5a1deb87bffaae66432950cd7bdbe28aaa99fa09ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5f0e397b15afa7d2f4319eeb919318c74bc7d6618f9870ca9206cc70d47e2c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:34:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:34:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5f0e397b15afa7d2f4319eeb919318c74bc7d6618f9870ca9206cc70d47e2c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c8eddd73334838dcf6aab5a1deb87bffaae66432950cd7bdbe28aaa99fa09ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5f0e397b15afa7d2f4319eeb919318c74bc7d6618f9870ca9206cc70d47e2c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5f0e397b15afa7d2f4319eeb919318c74bc7d6618f9870ca9206cc70d47e2c5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c8eddd73334838dcf6aab5a1deb87bffaae66432950cd7bdbe28aaa99fa09ef"} {"level":"debug","ts":"2026-07-09T04:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c8eddd73334838dcf6aab5a1deb87bffaae66432950cd7bdbe28aaa99fa09ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:34:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:34:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c8eddd73334838dcf6aab5a1deb87bffaae66432950cd7bdbe28aaa99fa09ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5f0e397b15afa7d2f4319eeb919318c74bc7d6618f9870ca9206cc70d47e2c5"} {"level":"info","ts":"2026-07-09T04:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c8eddd73334838dcf6aab5a1deb87bffaae66432950cd7bdbe28aaa99fa09ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5f0e397b15afa7d2f4319eeb919318c74bc7d6618f9870ca9206cc70d47e2c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:34:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:34:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5f0e397b15afa7d2f4319eeb919318c74bc7d6618f9870ca9206cc70d47e2c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5f0e397b15afa7d2f4319eeb919318c74bc7d6618f9870ca9206cc70d47e2c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c8eddd73334838dcf6aab5a1deb87bffaae66432950cd7bdbe28aaa99fa09ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:34:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:34:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c8eddd73334838dcf6aab5a1deb87bffaae66432950cd7bdbe28aaa99fa09ef"} {"level":"info","ts":"2026-07-09T04:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c8eddd73334838dcf6aab5a1deb87bffaae66432950cd7bdbe28aaa99fa09ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5f0e397b15afa7d2f4319eeb919318c74bc7d6618f9870ca9206cc70d47e2c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:34:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:34:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5f0e397b15afa7d2f4319eeb919318c74bc7d6618f9870ca9206cc70d47e2c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c8eddd73334838dcf6aab5a1deb87bffaae66432950cd7bdbe28aaa99fa09ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:34:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:34:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c8eddd73334838dcf6aab5a1deb87bffaae66432950cd7bdbe28aaa99fa09ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5f0e397b15afa7d2f4319eeb919318c74bc7d6618f9870ca9206cc70d47e2c5"} {"level":"info","ts":"2026-07-09T04:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c8eddd73334838dcf6aab5a1deb87bffaae66432950cd7bdbe28aaa99fa09ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5f0e397b15afa7d2f4319eeb919318c74bc7d6618f9870ca9206cc70d47e2c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:34:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:34:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5f0e397b15afa7d2f4319eeb919318c74bc7d6618f9870ca9206cc70d47e2c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5f0e397b15afa7d2f4319eeb919318c74bc7d6618f9870ca9206cc70d47e2c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c8eddd73334838dcf6aab5a1deb87bffaae66432950cd7bdbe28aaa99fa09ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:34:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:34:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c8eddd73334838dcf6aab5a1deb87bffaae66432950cd7bdbe28aaa99fa09ef"} {"level":"info","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c8eddd73334838dcf6aab5a1deb87bffaae66432950cd7bdbe28aaa99fa09ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5f0e397b15afa7d2f4319eeb919318c74bc7d6618f9870ca9206cc70d47e2c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:34:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:34:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5f0e397b15afa7d2f4319eeb919318c74bc7d6618f9870ca9206cc70d47e2c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c8eddd73334838dcf6aab5a1deb87bffaae66432950cd7bdbe28aaa99fa09ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:34:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:34:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c8eddd73334838dcf6aab5a1deb87bffaae66432950cd7bdbe28aaa99fa09ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5f0e397b15afa7d2f4319eeb919318c74bc7d6618f9870ca9206cc70d47e2c5"} {"level":"info","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c8eddd73334838dcf6aab5a1deb87bffaae66432950cd7bdbe28aaa99fa09ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5f0e397b15afa7d2f4319eeb919318c74bc7d6618f9870ca9206cc70d47e2c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:34:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:34:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5f0e397b15afa7d2f4319eeb919318c74bc7d6618f9870ca9206cc70d47e2c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c8eddd73334838dcf6aab5a1deb87bffaae66432950cd7bdbe28aaa99fa09ef"} {"level":"info","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5f0e397b15afa7d2f4319eeb919318c74bc7d6618f9870ca9206cc70d47e2c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c8eddd73334838dcf6aab5a1deb87bffaae66432950cd7bdbe28aaa99fa09ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5f0e397b15afa7d2f4319eeb919318c74bc7d6618f9870ca9206cc70d47e2c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:34:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:34:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5f0e397b15afa7d2f4319eeb919318c74bc7d6618f9870ca9206cc70d47e2c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5f0e397b15afa7d2f4319eeb919318c74bc7d6618f9870ca9206cc70d47e2c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5f0e397b15afa7d2f4319eeb919318c74bc7d6618f9870ca9206cc70d47e2c5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5f0e397b15afa7d2f4319eeb919318c74bc7d6618f9870ca9206cc70d47e2c5"} {"level":"debug","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5f0e397b15afa7d2f4319eeb919318c74bc7d6618f9870ca9206cc70d47e2c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:34:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:34:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5f0e397b15afa7d2f4319eeb919318c74bc7d6618f9870ca9206cc70d47e2c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c8eddd73334838dcf6aab5a1deb87bffaae66432950cd7bdbe28aaa99fa09ef"} {"level":"info","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5f0e397b15afa7d2f4319eeb919318c74bc7d6618f9870ca9206cc70d47e2c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5f0e397b15afa7d2f4319eeb919318c74bc7d6618f9870ca9206cc70d47e2c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:34:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:34:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5f0e397b15afa7d2f4319eeb919318c74bc7d6618f9870ca9206cc70d47e2c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5f0e397b15afa7d2f4319eeb919318c74bc7d6618f9870ca9206cc70d47e2c5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5f0e397b15afa7d2f4319eeb919318c74bc7d6618f9870ca9206cc70d47e2c5"} {"level":"debug","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5f0e397b15afa7d2f4319eeb919318c74bc7d6618f9870ca9206cc70d47e2c5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5f0e397b15afa7d2f4319eeb919318c74bc7d6618f9870ca9206cc70d47e2c5"} {"level":"debug","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5f0e397b15afa7d2f4319eeb919318c74bc7d6618f9870ca9206cc70d47e2c5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5f0e397b15afa7d2f4319eeb919318c74bc7d6618f9870ca9206cc70d47e2c5"} {"level":"debug","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7bdac4ebe77f1974a0bcb5f0a78a9015059c87f423585aa253624e90f8865a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:34:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:34:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7bdac4ebe77f1974a0bcb5f0a78a9015059c87f423585aa253624e90f8865a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5f0e397b15afa7d2f4319eeb919318c74bc7d6618f9870ca9206cc70d47e2c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:34:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:34:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5f0e397b15afa7d2f4319eeb919318c74bc7d6618f9870ca9206cc70d47e2c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7bdac4ebe77f1974a0bcb5f0a78a9015059c87f423585aa253624e90f8865a3"} {"level":"info","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5f0e397b15afa7d2f4319eeb919318c74bc7d6618f9870ca9206cc70d47e2c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7bdac4ebe77f1974a0bcb5f0a78a9015059c87f423585aa253624e90f8865a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5f0e397b15afa7d2f4319eeb919318c74bc7d6618f9870ca9206cc70d47e2c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7bdac4ebe77f1974a0bcb5f0a78a9015059c87f423585aa253624e90f8865a3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7bdac4ebe77f1974a0bcb5f0a78a9015059c87f423585aa253624e90f8865a3"} {"level":"debug","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7bdac4ebe77f1974a0bcb5f0a78a9015059c87f423585aa253624e90f8865a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:34:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:34:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e7bdac4ebe77f1974a0bcb5f0a78a9015059c87f423585aa253624e90f8865a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5f0e397b15afa7d2f4319eeb919318c74bc7d6618f9870ca9206cc70d47e2c5"} {"level":"info","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7bdac4ebe77f1974a0bcb5f0a78a9015059c87f423585aa253624e90f8865a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7bdac4ebe77f1974a0bcb5f0a78a9015059c87f423585aa253624e90f8865a3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7bdac4ebe77f1974a0bcb5f0a78a9015059c87f423585aa253624e90f8865a3"} {"level":"debug","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f3d0b3a5a9d0419d4de59f234e8b2b74004fc663cc178e779d067713c2a1292","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:34:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:34:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f3d0b3a5a9d0419d4de59f234e8b2b74004fc663cc178e779d067713c2a1292","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f3d0b3a5a9d0419d4de59f234e8b2b74004fc663cc178e779d067713c2a1292","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f3d0b3a5a9d0419d4de59f234e8b2b74004fc663cc178e779d067713c2a1292","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f3d0b3a5a9d0419d4de59f234e8b2b74004fc663cc178e779d067713c2a1292"} {"level":"debug","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f3d0b3a5a9d0419d4de59f234e8b2b74004fc663cc178e779d067713c2a1292","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f3d0b3a5a9d0419d4de59f234e8b2b74004fc663cc178e779d067713c2a1292"} {"level":"debug","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f3d0b3a5a9d0419d4de59f234e8b2b74004fc663cc178e779d067713c2a1292","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:34:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:34:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f3d0b3a5a9d0419d4de59f234e8b2b74004fc663cc178e779d067713c2a1292"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f3d0b3a5a9d0419d4de59f234e8b2b74004fc663cc178e779d067713c2a1292","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f3d0b3a5a9d0419d4de59f234e8b2b74004fc663cc178e779d067713c2a1292","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f3d0b3a5a9d0419d4de59f234e8b2b74004fc663cc178e779d067713c2a1292"} {"level":"debug","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d1c431ae18cb128700afec64d60c347172b83d063eddbb799c214b10a44c796","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:34:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:34:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d1c431ae18cb128700afec64d60c347172b83d063eddbb799c214b10a44c796","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d1c431ae18cb128700afec64d60c347172b83d063eddbb799c214b10a44c796","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:34:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:34:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d1c431ae18cb128700afec64d60c347172b83d063eddbb799c214b10a44c796"} {"level":"info","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d1c431ae18cb128700afec64d60c347172b83d063eddbb799c214b10a44c796","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d1c431ae18cb128700afec64d60c347172b83d063eddbb799c214b10a44c796","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:34:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:34:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8d1c431ae18cb128700afec64d60c347172b83d063eddbb799c214b10a44c796","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8d1c431ae18cb128700afec64d60c347172b83d063eddbb799c214b10a44c796\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d1c431ae18cb128700afec64d60c347172b83d063eddbb799c214b10a44c796","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d1c431ae18cb128700afec64d60c347172b83d063eddbb799c214b10a44c796","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d1c431ae18cb128700afec64d60c347172b83d063eddbb799c214b10a44c796"} {"level":"info","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d1c431ae18cb128700afec64d60c347172b83d063eddbb799c214b10a44c796"} {"level":"debug","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d1c431ae18cb128700afec64d60c347172b83d063eddbb799c214b10a44c796","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:34:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:34:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d1c431ae18cb128700afec64d60c347172b83d063eddbb799c214b10a44c796"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d1c431ae18cb128700afec64d60c347172b83d063eddbb799c214b10a44c796","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d1c431ae18cb128700afec64d60c347172b83d063eddbb799c214b10a44c796","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:34:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:34:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d1c431ae18cb128700afec64d60c347172b83d063eddbb799c214b10a44c796","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d1c431ae18cb128700afec64d60c347172b83d063eddbb799c214b10a44c796","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d1c431ae18cb128700afec64d60c347172b83d063eddbb799c214b10a44c796","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d1c431ae18cb128700afec64d60c347172b83d063eddbb799c214b10a44c796"} {"level":"debug","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d1c431ae18cb128700afec64d60c347172b83d063eddbb799c214b10a44c796","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d1c431ae18cb128700afec64d60c347172b83d063eddbb799c214b10a44c796"} {"level":"debug","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd8f17610f5674e41ba92dfc7dbe5ebaa655773a4d0098dbe5bd46063103dc7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:34:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:34:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd8f17610f5674e41ba92dfc7dbe5ebaa655773a4d0098dbe5bd46063103dc7b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd8f17610f5674e41ba92dfc7dbe5ebaa655773a4d0098dbe5bd46063103dc7b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d1c431ae18cb128700afec64d60c347172b83d063eddbb799c214b10a44c796","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:34:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:34:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d1c431ae18cb128700afec64d60c347172b83d063eddbb799c214b10a44c796"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd8f17610f5674e41ba92dfc7dbe5ebaa655773a4d0098dbe5bd46063103dc7b"} {"level":"info","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d1c431ae18cb128700afec64d60c347172b83d063eddbb799c214b10a44c796","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd8f17610f5674e41ba92dfc7dbe5ebaa655773a4d0098dbe5bd46063103dc7b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d1c431ae18cb128700afec64d60c347172b83d063eddbb799c214b10a44c796","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd8f17610f5674e41ba92dfc7dbe5ebaa655773a4d0098dbe5bd46063103dc7b"} {"level":"debug","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd8f17610f5674e41ba92dfc7dbe5ebaa655773a4d0098dbe5bd46063103dc7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:34:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:34:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd8f17610f5674e41ba92dfc7dbe5ebaa655773a4d0098dbe5bd46063103dc7b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd8f17610f5674e41ba92dfc7dbe5ebaa655773a4d0098dbe5bd46063103dc7b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd8f17610f5674e41ba92dfc7dbe5ebaa655773a4d0098dbe5bd46063103dc7b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d1c431ae18cb128700afec64d60c347172b83d063eddbb799c214b10a44c796"} {"level":"info","ts":"2026-07-09T04:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd8f17610f5674e41ba92dfc7dbe5ebaa655773a4d0098dbe5bd46063103dc7b"} {"level":"debug","ts":"2026-07-09T04:34:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7bdac4ebe77f1974a0bcb5f0a78a9015059c87f423585aa253624e90f8865a3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:34:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7bdac4ebe77f1974a0bcb5f0a78a9015059c87f423585aa253624e90f8865a3"} {"level":"debug","ts":"2026-07-09T04:34:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd72d769e3263a282ce6f15b1ca8c8023adaab7a9088c8b364e6e4eb93689301","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:34:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:34:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd72d769e3263a282ce6f15b1ca8c8023adaab7a9088c8b364e6e4eb93689301","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd72d769e3263a282ce6f15b1ca8c8023adaab7a9088c8b364e6e4eb93689301","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd72d769e3263a282ce6f15b1ca8c8023adaab7a9088c8b364e6e4eb93689301","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd72d769e3263a282ce6f15b1ca8c8023adaab7a9088c8b364e6e4eb93689301"} {"level":"debug","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd72d769e3263a282ce6f15b1ca8c8023adaab7a9088c8b364e6e4eb93689301","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd72d769e3263a282ce6f15b1ca8c8023adaab7a9088c8b364e6e4eb93689301"} {"level":"debug","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd72d769e3263a282ce6f15b1ca8c8023adaab7a9088c8b364e6e4eb93689301","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:34:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:34:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd72d769e3263a282ce6f15b1ca8c8023adaab7a9088c8b364e6e4eb93689301"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd72d769e3263a282ce6f15b1ca8c8023adaab7a9088c8b364e6e4eb93689301","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd72d769e3263a282ce6f15b1ca8c8023adaab7a9088c8b364e6e4eb93689301","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:34:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:34:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd72d769e3263a282ce6f15b1ca8c8023adaab7a9088c8b364e6e4eb93689301"} {"level":"info","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd72d769e3263a282ce6f15b1ca8c8023adaab7a9088c8b364e6e4eb93689301","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0efe2b4768a44f8324e865b5777735eaabae17774e28c67ace4220c24847f863","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:34:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:34:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0efe2b4768a44f8324e865b5777735eaabae17774e28c67ace4220c24847f863"} {"level":"info","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0efe2b4768a44f8324e865b5777735eaabae17774e28c67ace4220c24847f863","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd72d769e3263a282ce6f15b1ca8c8023adaab7a9088c8b364e6e4eb93689301","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0efe2b4768a44f8324e865b5777735eaabae17774e28c67ace4220c24847f863","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:34:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:34:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0efe2b4768a44f8324e865b5777735eaabae17774e28c67ace4220c24847f863"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0efe2b4768a44f8324e865b5777735eaabae17774e28c67ace4220c24847f863","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd72d769e3263a282ce6f15b1ca8c8023adaab7a9088c8b364e6e4eb93689301","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0efe2b4768a44f8324e865b5777735eaabae17774e28c67ace4220c24847f863","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:34:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:34:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0efe2b4768a44f8324e865b5777735eaabae17774e28c67ace4220c24847f863"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd72d769e3263a282ce6f15b1ca8c8023adaab7a9088c8b364e6e4eb93689301"} {"level":"error","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0efe2b4768a44f8324e865b5777735eaabae17774e28c67ace4220c24847f863","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0efe2b4768a44f8324e865b5777735eaabae17774e28c67ace4220c24847f863\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0efe2b4768a44f8324e865b5777735eaabae17774e28c67ace4220c24847f863","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:34:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:34:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0efe2b4768a44f8324e865b5777735eaabae17774e28c67ace4220c24847f863","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd72d769e3263a282ce6f15b1ca8c8023adaab7a9088c8b364e6e4eb93689301","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:34:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:34:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd72d769e3263a282ce6f15b1ca8c8023adaab7a9088c8b364e6e4eb93689301"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0efe2b4768a44f8324e865b5777735eaabae17774e28c67ace4220c24847f863"} {"level":"info","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd72d769e3263a282ce6f15b1ca8c8023adaab7a9088c8b364e6e4eb93689301","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0efe2b4768a44f8324e865b5777735eaabae17774e28c67ace4220c24847f863","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a89deb4adb2109a804ba3a0599b1e49a4cc2bc1a61dacb3f67febb49a398f22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd72d769e3263a282ce6f15b1ca8c8023adaab7a9088c8b364e6e4eb93689301","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0efe2b4768a44f8324e865b5777735eaabae17774e28c67ace4220c24847f863"} {"level":"debug","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0efe2b4768a44f8324e865b5777735eaabae17774e28c67ace4220c24847f863","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:34:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:34:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0efe2b4768a44f8324e865b5777735eaabae17774e28c67ace4220c24847f863"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a89deb4adb2109a804ba3a0599b1e49a4cc2bc1a61dacb3f67febb49a398f22"} {"level":"info","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0efe2b4768a44f8324e865b5777735eaabae17774e28c67ace4220c24847f863","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0efe2b4768a44f8324e865b5777735eaabae17774e28c67ace4220c24847f863","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd72d769e3263a282ce6f15b1ca8c8023adaab7a9088c8b364e6e4eb93689301"} {"level":"info","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0efe2b4768a44f8324e865b5777735eaabae17774e28c67ace4220c24847f863"} {"level":"debug","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c85755fa2e4d9068cf6f60f6a5e0306f7d15fea271668d2b9965b51e464a92ee","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c85755fa2e4d9068cf6f60f6a5e0306f7d15fea271668d2b9965b51e464a92ee"} {"level":"debug","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d4164edcb14408157ee8d9a65ea3b72ab50d9e47d50b6e6c17f0c46bd35da9a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3"} {"level":"info","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d4164edcb14408157ee8d9a65ea3b72ab50d9e47d50b6e6c17f0c46bd35da9a"} {"level":"debug","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"487647523f16369fb7e71ad8ffca193be357649b430f584323fccda9b7b7ce8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:34:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:34:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"487647523f16369fb7e71ad8ffca193be357649b430f584323fccda9b7b7ce8e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"487647523f16369fb7e71ad8ffca193be357649b430f584323fccda9b7b7ce8e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"487647523f16369fb7e71ad8ffca193be357649b430f584323fccda9b7b7ce8e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/487647523f16369fb7e71ad8ffca193be357649b430f584323fccda9b7b7ce8e"} {"level":"debug","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"487647523f16369fb7e71ad8ffca193be357649b430f584323fccda9b7b7ce8e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/487647523f16369fb7e71ad8ffca193be357649b430f584323fccda9b7b7ce8e"} {"level":"debug","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"487647523f16369fb7e71ad8ffca193be357649b430f584323fccda9b7b7ce8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:34:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:34:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["487647523f16369fb7e71ad8ffca193be357649b430f584323fccda9b7b7ce8e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"487647523f16369fb7e71ad8ffca193be357649b430f584323fccda9b7b7ce8e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd8f17610f5674e41ba92dfc7dbe5ebaa655773a4d0098dbe5bd46063103dc7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:34:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:34:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd8f17610f5674e41ba92dfc7dbe5ebaa655773a4d0098dbe5bd46063103dc7b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"487647523f16369fb7e71ad8ffca193be357649b430f584323fccda9b7b7ce8e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b80a443e849fc931c57c6f983005c1dd4ebd47abb119b869cf7732a051f1178a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd8f17610f5674e41ba92dfc7dbe5ebaa655773a4d0098dbe5bd46063103dc7b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd8f17610f5674e41ba92dfc7dbe5ebaa655773a4d0098dbe5bd46063103dc7b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd8f17610f5674e41ba92dfc7dbe5ebaa655773a4d0098dbe5bd46063103dc7b"} {"level":"debug","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd8f17610f5674e41ba92dfc7dbe5ebaa655773a4d0098dbe5bd46063103dc7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:34:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:34:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd8f17610f5674e41ba92dfc7dbe5ebaa655773a4d0098dbe5bd46063103dc7b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/487647523f16369fb7e71ad8ffca193be357649b430f584323fccda9b7b7ce8e"} {"level":"info","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd8f17610f5674e41ba92dfc7dbe5ebaa655773a4d0098dbe5bd46063103dc7b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd8f17610f5674e41ba92dfc7dbe5ebaa655773a4d0098dbe5bd46063103dc7b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b80a443e849fc931c57c6f983005c1dd4ebd47abb119b869cf7732a051f1178a"} {"level":"info","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd8f17610f5674e41ba92dfc7dbe5ebaa655773a4d0098dbe5bd46063103dc7b"} {"level":"debug","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b0a2b074404259ae826e42e1a82fbd5924dea7b1e5afd0ab8b8081917880e9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:34:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:34:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b0a2b074404259ae826e42e1a82fbd5924dea7b1e5afd0ab8b8081917880e9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b0a2b074404259ae826e42e1a82fbd5924dea7b1e5afd0ab8b8081917880e9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ef3dfb3ddb0fa80d71ccb5e6269b1e94308a9e31bf1387a7e21f38191bdb252","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b0a2b074404259ae826e42e1a82fbd5924dea7b1e5afd0ab8b8081917880e9d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b0a2b074404259ae826e42e1a82fbd5924dea7b1e5afd0ab8b8081917880e9d"} {"level":"debug","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f3d0b3a5a9d0419d4de59f234e8b2b74004fc663cc178e779d067713c2a1292","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b0a2b074404259ae826e42e1a82fbd5924dea7b1e5afd0ab8b8081917880e9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:34:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:34:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b0a2b074404259ae826e42e1a82fbd5924dea7b1e5afd0ab8b8081917880e9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ef3dfb3ddb0fa80d71ccb5e6269b1e94308a9e31bf1387a7e21f38191bdb252"} {"level":"info","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b0a2b074404259ae826e42e1a82fbd5924dea7b1e5afd0ab8b8081917880e9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b0a2b074404259ae826e42e1a82fbd5924dea7b1e5afd0ab8b8081917880e9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:34:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:34:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b0a2b074404259ae826e42e1a82fbd5924dea7b1e5afd0ab8b8081917880e9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b0a2b074404259ae826e42e1a82fbd5924dea7b1e5afd0ab8b8081917880e9d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b0a2b074404259ae826e42e1a82fbd5924dea7b1e5afd0ab8b8081917880e9d"} {"level":"debug","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b0a2b074404259ae826e42e1a82fbd5924dea7b1e5afd0ab8b8081917880e9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:34:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:34:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b0a2b074404259ae826e42e1a82fbd5924dea7b1e5afd0ab8b8081917880e9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b0a2b074404259ae826e42e1a82fbd5924dea7b1e5afd0ab8b8081917880e9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b0a2b074404259ae826e42e1a82fbd5924dea7b1e5afd0ab8b8081917880e9d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f3d0b3a5a9d0419d4de59f234e8b2b74004fc663cc178e779d067713c2a1292"} {"level":"debug","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"358040bc55247ad0bc283aa95f5e08065dcc79afb78135c369e39919e205ff3f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d5351643110f7d721e5ceb1e4ee793f82764bd2df4a9c71f65bead2bf643773","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b0a2b074404259ae826e42e1a82fbd5924dea7b1e5afd0ab8b8081917880e9d"} {"level":"info","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/358040bc55247ad0bc283aa95f5e08065dcc79afb78135c369e39919e205ff3f"} {"level":"info","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d5351643110f7d721e5ceb1e4ee793f82764bd2df4a9c71f65bead2bf643773"} {"level":"debug","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5f0e397b15afa7d2f4319eeb919318c74bc7d6618f9870ca9206cc70d47e2c5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5f0e397b15afa7d2f4319eeb919318c74bc7d6618f9870ca9206cc70d47e2c5"} {"level":"debug","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d1c431ae18cb128700afec64d60c347172b83d063eddbb799c214b10a44c796","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:34:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:34:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d1c431ae18cb128700afec64d60c347172b83d063eddbb799c214b10a44c796","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d1c431ae18cb128700afec64d60c347172b83d063eddbb799c214b10a44c796"} {"level":"debug","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d1c431ae18cb128700afec64d60c347172b83d063eddbb799c214b10a44c796","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d1c431ae18cb128700afec64d60c347172b83d063eddbb799c214b10a44c796","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:34:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:34:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d1c431ae18cb128700afec64d60c347172b83d063eddbb799c214b10a44c796"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d1c431ae18cb128700afec64d60c347172b83d063eddbb799c214b10a44c796"} {"level":"info","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d1c431ae18cb128700afec64d60c347172b83d063eddbb799c214b10a44c796","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83d3b7193a8937c28b7a433f9e80d323e6ef676ef571736c5797e855ecddc053","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:34:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:34:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83d3b7193a8937c28b7a433f9e80d323e6ef676ef571736c5797e855ecddc053"} {"level":"info","ts":"2026-07-09T04:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83d3b7193a8937c28b7a433f9e80d323e6ef676ef571736c5797e855ecddc053","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abc17050740f199dd8773f630dafeeebbcb7397b8043ad844d70e2d74fed432e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:34:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:34:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abc17050740f199dd8773f630dafeeebbcb7397b8043ad844d70e2d74fed432e"} {"level":"info","ts":"2026-07-09T04:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abc17050740f199dd8773f630dafeeebbcb7397b8043ad844d70e2d74fed432e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d1c431ae18cb128700afec64d60c347172b83d063eddbb799c214b10a44c796","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:34:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:34:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d1c431ae18cb128700afec64d60c347172b83d063eddbb799c214b10a44c796","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83d3b7193a8937c28b7a433f9e80d323e6ef676ef571736c5797e855ecddc053","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:34:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:34:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83d3b7193a8937c28b7a433f9e80d323e6ef676ef571736c5797e855ecddc053"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d1c431ae18cb128700afec64d60c347172b83d063eddbb799c214b10a44c796"} {"level":"info","ts":"2026-07-09T04:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83d3b7193a8937c28b7a433f9e80d323e6ef676ef571736c5797e855ecddc053","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5be12b9fc485c506a85c1050d7b618faf8e73a8463fed9ef5f938fd8959b6a42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abc17050740f199dd8773f630dafeeebbcb7397b8043ad844d70e2d74fed432e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:34:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:34:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["abc17050740f199dd8773f630dafeeebbcb7397b8043ad844d70e2d74fed432e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83d3b7193a8937c28b7a433f9e80d323e6ef676ef571736c5797e855ecddc053"} {"level":"info","ts":"2026-07-09T04:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abc17050740f199dd8773f630dafeeebbcb7397b8043ad844d70e2d74fed432e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c8eddd73334838dcf6aab5a1deb87bffaae66432950cd7bdbe28aaa99fa09ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d1c431ae18cb128700afec64d60c347172b83d063eddbb799c214b10a44c796","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:34:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:34:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d1c431ae18cb128700afec64d60c347172b83d063eddbb799c214b10a44c796"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d1c431ae18cb128700afec64d60c347172b83d063eddbb799c214b10a44c796","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83d3b7193a8937c28b7a433f9e80d323e6ef676ef571736c5797e855ecddc053","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"abc17050740f199dd8773f630dafeeebbcb7397b8043ad844d70e2d74fed432e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d1c431ae18cb128700afec64d60c347172b83d063eddbb799c214b10a44c796","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fe83e46a42548dadaa01a65a3c789332e908f79dcb111a2cf03d5c474f64c7c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5be12b9fc485c506a85c1050d7b618faf8e73a8463fed9ef5f938fd8959b6a42"} {"level":"debug","ts":"2026-07-09T04:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9556fbbf1482fea39f704afebd0f20f2492618ad4f2d293cad091454e6164eff","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abc17050740f199dd8773f630dafeeebbcb7397b8043ad844d70e2d74fed432e"} {"level":"debug","ts":"2026-07-09T04:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac51321161cf7cc271fbe7c0ff5b3e077c1dd51c4f450ae5979f52357e5004b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c8eddd73334838dcf6aab5a1deb87bffaae66432950cd7bdbe28aaa99fa09ef"} {"level":"info","ts":"2026-07-09T04:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d1c431ae18cb128700afec64d60c347172b83d063eddbb799c214b10a44c796"} {"level":"info","ts":"2026-07-09T04:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83d3b7193a8937c28b7a433f9e80d323e6ef676ef571736c5797e855ecddc053"} {"level":"info","ts":"2026-07-09T04:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fe83e46a42548dadaa01a65a3c789332e908f79dcb111a2cf03d5c474f64c7c"} {"level":"info","ts":"2026-07-09T04:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9556fbbf1482fea39f704afebd0f20f2492618ad4f2d293cad091454e6164eff"} {"level":"info","ts":"2026-07-09T04:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ac51321161cf7cc271fbe7c0ff5b3e077c1dd51c4f450ae5979f52357e5004b"} {"level":"info","ts":"2026-07-09T04:34:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0fba3240-1a31-473d-b0ea-950004e89f24","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:44356","PortSpecifier":{"PortValue":44356}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0fba3240-1a31-473d-b0ea-950004e89f24","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6bd312.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T04:34:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0fba3240-1a31-473d-b0ea-950004e89f24","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:44356","PortSpecifier":{"PortValue":44356}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783571669,"nanos":501582077},"http":{"id":"0fba3240-1a31-473d-b0ea-950004e89f24","method":"POST","headers":{":authority":"e2e-shared-a-6bd312.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T04:34:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0fba3240-1a31-473d-b0ea-950004e89f24","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-09T04:34:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0fba3240-1a31-473d-b0ea-950004e89f24","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3462404a-d93a-4f63-9ebc-6c7f440ea30a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=98c488c9-b640-4da6-939b-4ae7b07b3478"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e705e1dce26e"]}} {"level":"debug","ts":"2026-07-09T04:34:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0fba3240-1a31-473d-b0ea-950004e89f24","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e705e1dce26e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=98c488c9-b640-4da6-939b-4ae7b07b3478"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3462404a-d93a-4f63-9ebc-6c7f440ea30a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0efe2b4768a44f8324e865b5777735eaabae17774e28c67ace4220c24847f863"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6bd312.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T04:34:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0fba3240-1a31-473d-b0ea-950004e89f24","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:34:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0fba3240-1a31-473d-b0ea-950004e89f24","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:34:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0fba3240-1a31-473d-b0ea-950004e89f24","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6bd312/sub-test-model-6bd312\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:34:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0fba3240-1a31-473d-b0ea-950004e89f24","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-09T04:34:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0fba3240-1a31-473d-b0ea-950004e89f24","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-09T04:34:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0fba3240-1a31-473d-b0ea-950004e89f24","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-09T04:34:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0fba3240-1a31-473d-b0ea-950004e89f24","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T04:34:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0fba3240-1a31-473d-b0ea-950004e89f24","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T04:34:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ec9096c4-db48-41da-9886-487b9b34fb90","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54284","PortSpecifier":{"PortValue":54284}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ec9096c4-db48-41da-9886-487b9b34fb90","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-589b59.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T04:34:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ec9096c4-db48-41da-9886-487b9b34fb90","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54284","PortSpecifier":{"PortValue":54284}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783571669,"nanos":542497340},"http":{"id":"ec9096c4-db48-41da-9886-487b9b34fb90","method":"POST","headers":{":authority":"e2e-shared-b-589b59.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T04:34:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ec9096c4-db48-41da-9886-487b9b34fb90","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-09T04:34:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ec9096c4-db48-41da-9886-487b9b34fb90","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3462404a-d93a-4f63-9ebc-6c7f440ea30a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=98c488c9-b640-4da6-939b-4ae7b07b3478"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e705e1dce26e"]}} {"level":"debug","ts":"2026-07-09T04:34:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ec9096c4-db48-41da-9886-487b9b34fb90","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e705e1dce26e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=98c488c9-b640-4da6-939b-4ae7b07b3478"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3462404a-d93a-4f63-9ebc-6c7f440ea30a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9556fbbf1482fea39f704afebd0f20f2492618ad4f2d293cad091454e6164eff"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-589b59.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T04:34:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec9096c4-db48-41da-9886-487b9b34fb90","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:34:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec9096c4-db48-41da-9886-487b9b34fb90","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:34:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec9096c4-db48-41da-9886-487b9b34fb90","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-589b59/sub-test-model-589b59\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:34:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ec9096c4-db48-41da-9886-487b9b34fb90","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-09T04:34:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec9096c4-db48-41da-9886-487b9b34fb90","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-09T04:34:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec9096c4-db48-41da-9886-487b9b34fb90","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-09T04:34:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ec9096c4-db48-41da-9886-487b9b34fb90","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T04:34:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ec9096c4-db48-41da-9886-487b9b34fb90","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T04:34:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3fc5b788-2319-4176-8ce8-872d7ff835fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:44360","PortSpecifier":{"PortValue":44360}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3fc5b788-2319-4176-8ce8-872d7ff835fb","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-6bd312.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T04:34:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3fc5b788-2319-4176-8ce8-872d7ff835fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:44360","PortSpecifier":{"PortValue":44360}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783571669,"nanos":580266888},"http":{"id":"3fc5b788-2319-4176-8ce8-872d7ff835fb","method":"GET","headers":{":authority":"e2e-shared-a-6bd312.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T04:34:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3fc5b788-2319-4176-8ce8-872d7ff835fb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-f9OhZdYc6CnhY4IR_VYF8yyPOX0xM5OYCQ4Swz67jRaB8WoTT6FPuZ1mkmCd"} {"level":"debug","ts":"2026-07-09T04:34:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3fc5b788-2319-4176-8ce8-872d7ff835fb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6bd312.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-f9OhZdYc6CnhY4IR_VYF8yyPOX0xM5OYCQ4Swz67jRaB8WoTT6FPuZ1mkmCd\"}"} {"level":"debug","ts":"2026-07-09T04:34:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3fc5b788-2319-4176-8ce8-872d7ff835fb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6bd312.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3e33ded5-3550-4ba0-96a6-7150e27c412b","keyName":"e2e-sub-iso-890057","subscription":"e2e-a-only-976d21","tenant":"e2e-shared-a-6bd312","userId":"3e33ded5-3550-4ba0-96a6-7150e27c412b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-09T04:34:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3fc5b788-2319-4176-8ce8-872d7ff835fb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T04:34:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3fc5b788-2319-4176-8ce8-872d7ff835fb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:34:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3fc5b788-2319-4176-8ce8-872d7ff835fb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:34:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3fc5b788-2319-4176-8ce8-872d7ff835fb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6bd312/sub-test-model-6bd312\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:34:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3fc5b788-2319-4176-8ce8-872d7ff835fb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-09T04:34:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3fc5b788-2319-4176-8ce8-872d7ff835fb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-976d21"} {"level":"debug","ts":"2026-07-09T04:34:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3fc5b788-2319-4176-8ce8-872d7ff835fb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T04:34:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3fc5b788-2319-4176-8ce8-872d7ff835fb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-09T04:34:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3fc5b788-2319-4176-8ce8-872d7ff835fb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T04:34:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3fc5b788-2319-4176-8ce8-872d7ff835fb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T04:34:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"08b8cb6e-4aeb-4a90-89fc-7499e254c237","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54298","PortSpecifier":{"PortValue":54298}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"08b8cb6e-4aeb-4a90-89fc-7499e254c237","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-589b59.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T04:34:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"08b8cb6e-4aeb-4a90-89fc-7499e254c237","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54298","PortSpecifier":{"PortValue":54298}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783571669,"nanos":621208060},"http":{"id":"08b8cb6e-4aeb-4a90-89fc-7499e254c237","method":"GET","headers":{":authority":"e2e-shared-b-589b59.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T04:34:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"08b8cb6e-4aeb-4a90-89fc-7499e254c237","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1cclggaWsdPaY42Mg_Q0p4lkiqU3J1SrmiNfAmXsBTIddbNu4p0amZHMXdwky"} {"level":"debug","ts":"2026-07-09T04:34:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"08b8cb6e-4aeb-4a90-89fc-7499e254c237","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-589b59.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1cclggaWsdPaY42Mg_Q0p4lkiqU3J1SrmiNfAmXsBTIddbNu4p0amZHMXdwky\"}"} {"level":"debug","ts":"2026-07-09T04:34:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"08b8cb6e-4aeb-4a90-89fc-7499e254c237","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-589b59.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c7656836-7448-4d97-bfbb-e15b82abe181","keyName":"e2e-sub-iso-393033","subscription":"e2e-b-only-976d21","tenant":"e2e-shared-b-589b59","userId":"c7656836-7448-4d97-bfbb-e15b82abe181","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-09T04:34:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"08b8cb6e-4aeb-4a90-89fc-7499e254c237","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T04:34:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"08b8cb6e-4aeb-4a90-89fc-7499e254c237","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:34:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"08b8cb6e-4aeb-4a90-89fc-7499e254c237","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:34:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"08b8cb6e-4aeb-4a90-89fc-7499e254c237","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-589b59/sub-test-model-589b59\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:34:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"08b8cb6e-4aeb-4a90-89fc-7499e254c237","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T04:34:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"08b8cb6e-4aeb-4a90-89fc-7499e254c237","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-976d21"} {"level":"debug","ts":"2026-07-09T04:34:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"08b8cb6e-4aeb-4a90-89fc-7499e254c237","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-09T04:34:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"08b8cb6e-4aeb-4a90-89fc-7499e254c237","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-09T04:34:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"08b8cb6e-4aeb-4a90-89fc-7499e254c237","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T04:34:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"08b8cb6e-4aeb-4a90-89fc-7499e254c237","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T04:34:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1e767aa8-ebf9-4189-8a2c-6be1043c6ea2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54544","PortSpecifier":{"PortValue":54544}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1e767aa8-ebf9-4189-8a2c-6be1043c6ea2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6bd312.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T04:34:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1e767aa8-ebf9-4189-8a2c-6be1043c6ea2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54544","PortSpecifier":{"PortValue":54544}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783571679,"nanos":541091396},"http":{"id":"1e767aa8-ebf9-4189-8a2c-6be1043c6ea2","method":"POST","headers":{":authority":"e2e-shared-a-6bd312.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T04:34:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1e767aa8-ebf9-4189-8a2c-6be1043c6ea2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-09T04:34:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1e767aa8-ebf9-4189-8a2c-6be1043c6ea2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3462404a-d93a-4f63-9ebc-6c7f440ea30a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=98c488c9-b640-4da6-939b-4ae7b07b3478"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e705e1dce26e"]}} {"level":"debug","ts":"2026-07-09T04:34:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1e767aa8-ebf9-4189-8a2c-6be1043c6ea2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e705e1dce26e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=98c488c9-b640-4da6-939b-4ae7b07b3478"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3462404a-d93a-4f63-9ebc-6c7f440ea30a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0efe2b4768a44f8324e865b5777735eaabae17774e28c67ace4220c24847f863"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6bd312.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T04:34:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e767aa8-ebf9-4189-8a2c-6be1043c6ea2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:34:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e767aa8-ebf9-4189-8a2c-6be1043c6ea2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:34:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e767aa8-ebf9-4189-8a2c-6be1043c6ea2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6bd312/sub-test-model-6bd312\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:34:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1e767aa8-ebf9-4189-8a2c-6be1043c6ea2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-09T04:34:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1e767aa8-ebf9-4189-8a2c-6be1043c6ea2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-09T04:34:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1e767aa8-ebf9-4189-8a2c-6be1043c6ea2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-09T04:34:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1e767aa8-ebf9-4189-8a2c-6be1043c6ea2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T04:34:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1e767aa8-ebf9-4189-8a2c-6be1043c6ea2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T04:34:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eeacb09f-b9b9-4f37-8342-222e623e5991","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43396","PortSpecifier":{"PortValue":43396}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"eeacb09f-b9b9-4f37-8342-222e623e5991","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-589b59.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T04:34:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eeacb09f-b9b9-4f37-8342-222e623e5991","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43396","PortSpecifier":{"PortValue":43396}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783571679,"nanos":574162723},"http":{"id":"eeacb09f-b9b9-4f37-8342-222e623e5991","method":"POST","headers":{":authority":"e2e-shared-b-589b59.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T04:34:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"eeacb09f-b9b9-4f37-8342-222e623e5991","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-09T04:34:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"eeacb09f-b9b9-4f37-8342-222e623e5991","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3462404a-d93a-4f63-9ebc-6c7f440ea30a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=98c488c9-b640-4da6-939b-4ae7b07b3478"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e705e1dce26e"]}} {"level":"debug","ts":"2026-07-09T04:34:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"eeacb09f-b9b9-4f37-8342-222e623e5991","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e705e1dce26e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=98c488c9-b640-4da6-939b-4ae7b07b3478"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3462404a-d93a-4f63-9ebc-6c7f440ea30a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9556fbbf1482fea39f704afebd0f20f2492618ad4f2d293cad091454e6164eff"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-589b59.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T04:34:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eeacb09f-b9b9-4f37-8342-222e623e5991","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:34:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eeacb09f-b9b9-4f37-8342-222e623e5991","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-589b59/sub-test-model-589b59\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:34:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eeacb09f-b9b9-4f37-8342-222e623e5991","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:34:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"eeacb09f-b9b9-4f37-8342-222e623e5991","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-09T04:34:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eeacb09f-b9b9-4f37-8342-222e623e5991","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-09T04:34:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eeacb09f-b9b9-4f37-8342-222e623e5991","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-09T04:34:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eeacb09f-b9b9-4f37-8342-222e623e5991","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T04:34:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eeacb09f-b9b9-4f37-8342-222e623e5991","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T04:34:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f636ce0c-d17b-4b59-9dfb-f85c8df89f1e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54554","PortSpecifier":{"PortValue":54554}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f636ce0c-d17b-4b59-9dfb-f85c8df89f1e","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-6bd312.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T04:34:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f636ce0c-d17b-4b59-9dfb-f85c8df89f1e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54554","PortSpecifier":{"PortValue":54554}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783571679,"nanos":608354463},"http":{"id":"f636ce0c-d17b-4b59-9dfb-f85c8df89f1e","method":"POST","headers":{":authority":"e2e-shared-a-6bd312.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T04:34:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f636ce0c-d17b-4b59-9dfb-f85c8df89f1e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-tSSZI3RvorYv8F3R_gX1oAxb46btJoomibgF4VrG5ULiOAid7dzepbIzbiOa"} {"level":"debug","ts":"2026-07-09T04:34:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f636ce0c-d17b-4b59-9dfb-f85c8df89f1e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6bd312.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-tSSZI3RvorYv8F3R_gX1oAxb46btJoomibgF4VrG5ULiOAid7dzepbIzbiOa\"}"} {"level":"debug","ts":"2026-07-09T04:34:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f636ce0c-d17b-4b59-9dfb-f85c8df89f1e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6bd312.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b853fd29-899d-4d2a-8c98-164f02f55df5","keyName":"e2e-sub-iso-4323ea","subscription":"e2e-shared-sub-7978a6","tenant":"e2e-shared-a-6bd312","userId":"b853fd29-899d-4d2a-8c98-164f02f55df5","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-09T04:34:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f636ce0c-d17b-4b59-9dfb-f85c8df89f1e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T04:34:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f636ce0c-d17b-4b59-9dfb-f85c8df89f1e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:34:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f636ce0c-d17b-4b59-9dfb-f85c8df89f1e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:34:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f636ce0c-d17b-4b59-9dfb-f85c8df89f1e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6bd312/sub-test-model-6bd312\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:34:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f636ce0c-d17b-4b59-9dfb-f85c8df89f1e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T04:34:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f636ce0c-d17b-4b59-9dfb-f85c8df89f1e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-09T04:34:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f636ce0c-d17b-4b59-9dfb-f85c8df89f1e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-09T04:34:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f636ce0c-d17b-4b59-9dfb-f85c8df89f1e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-7978a6"} {"level":"info","ts":"2026-07-09T04:34:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f636ce0c-d17b-4b59-9dfb-f85c8df89f1e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T04:34:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f636ce0c-d17b-4b59-9dfb-f85c8df89f1e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T04:34:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5d709ec8-c72a-460e-99d2-aef281aa471e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43410","PortSpecifier":{"PortValue":43410}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5d709ec8-c72a-460e-99d2-aef281aa471e","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-589b59.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T04:34:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5d709ec8-c72a-460e-99d2-aef281aa471e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43410","PortSpecifier":{"PortValue":43410}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783571679,"nanos":639121914},"http":{"id":"5d709ec8-c72a-460e-99d2-aef281aa471e","method":"POST","headers":{":authority":"e2e-shared-b-589b59.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T04:34:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5d709ec8-c72a-460e-99d2-aef281aa471e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-QWGsM3LFgW2vrSKl_tzhRm9ehrhyUZGyDNbuETsJgQCwgnxoh9nc6nLzjzsw"} {"level":"debug","ts":"2026-07-09T04:34:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5d709ec8-c72a-460e-99d2-aef281aa471e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-589b59.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-QWGsM3LFgW2vrSKl_tzhRm9ehrhyUZGyDNbuETsJgQCwgnxoh9nc6nLzjzsw\"}"} {"level":"debug","ts":"2026-07-09T04:34:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5d709ec8-c72a-460e-99d2-aef281aa471e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-589b59.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"442d0c05-ce7a-4e3d-be89-437e94202995","keyName":"e2e-sub-iso-238037","subscription":"e2e-shared-sub-7978a6","tenant":"e2e-shared-b-589b59","userId":"442d0c05-ce7a-4e3d-be89-437e94202995","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-09T04:34:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5d709ec8-c72a-460e-99d2-aef281aa471e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T04:34:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d709ec8-c72a-460e-99d2-aef281aa471e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:34:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d709ec8-c72a-460e-99d2-aef281aa471e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-589b59/sub-test-model-589b59\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:34:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d709ec8-c72a-460e-99d2-aef281aa471e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:34:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5d709ec8-c72a-460e-99d2-aef281aa471e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-7978a6"} {"level":"debug","ts":"2026-07-09T04:34:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5d709ec8-c72a-460e-99d2-aef281aa471e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T04:34:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5d709ec8-c72a-460e-99d2-aef281aa471e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-09T04:34:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5d709ec8-c72a-460e-99d2-aef281aa471e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-09T04:34:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5d709ec8-c72a-460e-99d2-aef281aa471e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T04:34:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5d709ec8-c72a-460e-99d2-aef281aa471e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T04:34:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e7bdac4ebe77f1974a0bcb5f0a78a9015059c87f423585aa253624e90f8865a3"} {"level":"info","ts":"2026-07-09T04:34:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/487647523f16369fb7e71ad8ffca193be357649b430f584323fccda9b7b7ce8e"} {"level":"info","ts":"2026-07-09T04:34:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0d5351643110f7d721e5ceb1e4ee793f82764bd2df4a9c71f65bead2bf643773"} {"level":"info","ts":"2026-07-09T04:34:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/358040bc55247ad0bc283aa95f5e08065dcc79afb78135c369e39919e205ff3f"} {"level":"info","ts":"2026-07-09T04:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f3d0b3a5a9d0419d4de59f234e8b2b74004fc663cc178e779d067713c2a1292"} {"level":"info","ts":"2026-07-09T04:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ac51321161cf7cc271fbe7c0ff5b3e077c1dd51c4f450ae5979f52357e5004b"} {"level":"info","ts":"2026-07-09T04:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c85755fa2e4d9068cf6f60f6a5e0306f7d15fea271668d2b9965b51e464a92ee"} {"level":"info","ts":"2026-07-09T04:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/83d3b7193a8937c28b7a433f9e80d323e6ef676ef571736c5797e855ecddc053"} {"level":"info","ts":"2026-07-09T04:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8d1c431ae18cb128700afec64d60c347172b83d063eddbb799c214b10a44c796"} {"level":"info","ts":"2026-07-09T04:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c8eddd73334838dcf6aab5a1deb87bffaae66432950cd7bdbe28aaa99fa09ef"} {"level":"info","ts":"2026-07-09T04:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cd8f17610f5674e41ba92dfc7dbe5ebaa655773a4d0098dbe5bd46063103dc7b"} {"level":"info","ts":"2026-07-09T04:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c5f0e397b15afa7d2f4319eeb919318c74bc7d6618f9870ca9206cc70d47e2c5"} {"level":"info","ts":"2026-07-09T04:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/abc17050740f199dd8773f630dafeeebbcb7397b8043ad844d70e2d74fed432e"} {"level":"info","ts":"2026-07-09T04:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b80a443e849fc931c57c6f983005c1dd4ebd47abb119b869cf7732a051f1178a"} {"level":"info","ts":"2026-07-09T04:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0a89deb4adb2109a804ba3a0599b1e49a4cc2bc1a61dacb3f67febb49a398f22"} {"level":"info","ts":"2026-07-09T04:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7ef3dfb3ddb0fa80d71ccb5e6269b1e94308a9e31bf1387a7e21f38191bdb252"} {"level":"debug","ts":"2026-07-09T04:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e954dbef497be72c8b16865963b1cec5f813436a7db325e77b939c9c53958b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:35:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:35:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e954dbef497be72c8b16865963b1cec5f813436a7db325e77b939c9c53958b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e954dbef497be72c8b16865963b1cec5f813436a7db325e77b939c9c53958b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e954dbef497be72c8b16865963b1cec5f813436a7db325e77b939c9c53958b1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e954dbef497be72c8b16865963b1cec5f813436a7db325e77b939c9c53958b1"} {"level":"debug","ts":"2026-07-09T04:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e954dbef497be72c8b16865963b1cec5f813436a7db325e77b939c9c53958b1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e954dbef497be72c8b16865963b1cec5f813436a7db325e77b939c9c53958b1"} {"level":"debug","ts":"2026-07-09T04:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e954dbef497be72c8b16865963b1cec5f813436a7db325e77b939c9c53958b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:35:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:35:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e954dbef497be72c8b16865963b1cec5f813436a7db325e77b939c9c53958b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e954dbef497be72c8b16865963b1cec5f813436a7db325e77b939c9c53958b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e954dbef497be72c8b16865963b1cec5f813436a7db325e77b939c9c53958b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:35:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:35:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e954dbef497be72c8b16865963b1cec5f813436a7db325e77b939c9c53958b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e954dbef497be72c8b16865963b1cec5f813436a7db325e77b939c9c53958b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e954dbef497be72c8b16865963b1cec5f813436a7db325e77b939c9c53958b1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e954dbef497be72c8b16865963b1cec5f813436a7db325e77b939c9c53958b1"} {"level":"debug","ts":"2026-07-09T04:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e954dbef497be72c8b16865963b1cec5f813436a7db325e77b939c9c53958b1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e954dbef497be72c8b16865963b1cec5f813436a7db325e77b939c9c53958b1"} {"level":"debug","ts":"2026-07-09T04:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e954dbef497be72c8b16865963b1cec5f813436a7db325e77b939c9c53958b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:35:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:35:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e954dbef497be72c8b16865963b1cec5f813436a7db325e77b939c9c53958b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e954dbef497be72c8b16865963b1cec5f813436a7db325e77b939c9c53958b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e954dbef497be72c8b16865963b1cec5f813436a7db325e77b939c9c53958b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:35:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:35:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e954dbef497be72c8b16865963b1cec5f813436a7db325e77b939c9c53958b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e954dbef497be72c8b16865963b1cec5f813436a7db325e77b939c9c53958b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e954dbef497be72c8b16865963b1cec5f813436a7db325e77b939c9c53958b1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e954dbef497be72c8b16865963b1cec5f813436a7db325e77b939c9c53958b1"} {"level":"debug","ts":"2026-07-09T04:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e954dbef497be72c8b16865963b1cec5f813436a7db325e77b939c9c53958b1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e954dbef497be72c8b16865963b1cec5f813436a7db325e77b939c9c53958b1"} {"level":"debug","ts":"2026-07-09T04:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e954dbef497be72c8b16865963b1cec5f813436a7db325e77b939c9c53958b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:35:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:35:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e954dbef497be72c8b16865963b1cec5f813436a7db325e77b939c9c53958b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e954dbef497be72c8b16865963b1cec5f813436a7db325e77b939c9c53958b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e954dbef497be72c8b16865963b1cec5f813436a7db325e77b939c9c53958b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:35:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:35:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e954dbef497be72c8b16865963b1cec5f813436a7db325e77b939c9c53958b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"448a71a0e47b91809eb578fd931e4b3b359ab6d145ff4b348d40842a9d37c041","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:35:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:35:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"448a71a0e47b91809eb578fd931e4b3b359ab6d145ff4b348d40842a9d37c041","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e954dbef497be72c8b16865963b1cec5f813436a7db325e77b939c9c53958b1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e954dbef497be72c8b16865963b1cec5f813436a7db325e77b939c9c53958b1"} {"level":"debug","ts":"2026-07-09T04:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"448a71a0e47b91809eb578fd931e4b3b359ab6d145ff4b348d40842a9d37c041","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:35:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:35:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"448a71a0e47b91809eb578fd931e4b3b359ab6d145ff4b348d40842a9d37c041","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e954dbef497be72c8b16865963b1cec5f813436a7db325e77b939c9c53958b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:35:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:35:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e954dbef497be72c8b16865963b1cec5f813436a7db325e77b939c9c53958b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/448a71a0e47b91809eb578fd931e4b3b359ab6d145ff4b348d40842a9d37c041"} {"level":"info","ts":"2026-07-09T04:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e954dbef497be72c8b16865963b1cec5f813436a7db325e77b939c9c53958b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"448a71a0e47b91809eb578fd931e4b3b359ab6d145ff4b348d40842a9d37c041","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:35:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:35:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["448a71a0e47b91809eb578fd931e4b3b359ab6d145ff4b348d40842a9d37c041"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"448a71a0e47b91809eb578fd931e4b3b359ab6d145ff4b348d40842a9d37c041","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e954dbef497be72c8b16865963b1cec5f813436a7db325e77b939c9c53958b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:35:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:35:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e954dbef497be72c8b16865963b1cec5f813436a7db325e77b939c9c53958b1"} {"level":"info","ts":"2026-07-09T04:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e954dbef497be72c8b16865963b1cec5f813436a7db325e77b939c9c53958b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"448a71a0e47b91809eb578fd931e4b3b359ab6d145ff4b348d40842a9d37c041","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:35:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:35:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"448a71a0e47b91809eb578fd931e4b3b359ab6d145ff4b348d40842a9d37c041","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e954dbef497be72c8b16865963b1cec5f813436a7db325e77b939c9c53958b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:35:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:35:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e954dbef497be72c8b16865963b1cec5f813436a7db325e77b939c9c53958b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/448a71a0e47b91809eb578fd931e4b3b359ab6d145ff4b348d40842a9d37c041"} {"level":"info","ts":"2026-07-09T04:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e954dbef497be72c8b16865963b1cec5f813436a7db325e77b939c9c53958b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"448a71a0e47b91809eb578fd931e4b3b359ab6d145ff4b348d40842a9d37c041","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:35:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:35:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["448a71a0e47b91809eb578fd931e4b3b359ab6d145ff4b348d40842a9d37c041"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"448a71a0e47b91809eb578fd931e4b3b359ab6d145ff4b348d40842a9d37c041","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4328ee8fc8f24dd2c0c663d2fb34abe2b1f7af5f2ed3ed1b4d822e115766fbea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:35:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:35:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e954dbef497be72c8b16865963b1cec5f813436a7db325e77b939c9c53958b1"} {"level":"info","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4328ee8fc8f24dd2c0c663d2fb34abe2b1f7af5f2ed3ed1b4d822e115766fbea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e954dbef497be72c8b16865963b1cec5f813436a7db325e77b939c9c53958b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"448a71a0e47b91809eb578fd931e4b3b359ab6d145ff4b348d40842a9d37c041","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:35:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:35:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"448a71a0e47b91809eb578fd931e4b3b359ab6d145ff4b348d40842a9d37c041","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4328ee8fc8f24dd2c0c663d2fb34abe2b1f7af5f2ed3ed1b4d822e115766fbea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"448a71a0e47b91809eb578fd931e4b3b359ab6d145ff4b348d40842a9d37c041","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"448a71a0e47b91809eb578fd931e4b3b359ab6d145ff4b348d40842a9d37c041","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/448a71a0e47b91809eb578fd931e4b3b359ab6d145ff4b348d40842a9d37c041"} {"level":"debug","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4328ee8fc8f24dd2c0c663d2fb34abe2b1f7af5f2ed3ed1b4d822e115766fbea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:35:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:35:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4328ee8fc8f24dd2c0c663d2fb34abe2b1f7af5f2ed3ed1b4d822e115766fbea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4328ee8fc8f24dd2c0c663d2fb34abe2b1f7af5f2ed3ed1b4d822e115766fbea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"448a71a0e47b91809eb578fd931e4b3b359ab6d145ff4b348d40842a9d37c041","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:35:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:35:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["448a71a0e47b91809eb578fd931e4b3b359ab6d145ff4b348d40842a9d37c041"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4328ee8fc8f24dd2c0c663d2fb34abe2b1f7af5f2ed3ed1b4d822e115766fbea"} {"level":"info","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"448a71a0e47b91809eb578fd931e4b3b359ab6d145ff4b348d40842a9d37c041","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"448a71a0e47b91809eb578fd931e4b3b359ab6d145ff4b348d40842a9d37c041","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4328ee8fc8f24dd2c0c663d2fb34abe2b1f7af5f2ed3ed1b4d822e115766fbea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:35:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:35:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4328ee8fc8f24dd2c0c663d2fb34abe2b1f7af5f2ed3ed1b4d822e115766fbea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4328ee8fc8f24dd2c0c663d2fb34abe2b1f7af5f2ed3ed1b4d822e115766fbea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4328ee8fc8f24dd2c0c663d2fb34abe2b1f7af5f2ed3ed1b4d822e115766fbea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7eedb15ff0af39ab93dd78ea24e525d64e37d9fb3ee56a1437f96f28afb1ff7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:35:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:35:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e954dbef497be72c8b16865963b1cec5f813436a7db325e77b939c9c53958b1"} {"level":"info","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7eedb15ff0af39ab93dd78ea24e525d64e37d9fb3ee56a1437f96f28afb1ff7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7eedb15ff0af39ab93dd78ea24e525d64e37d9fb3ee56a1437f96f28afb1ff7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7eedb15ff0af39ab93dd78ea24e525d64e37d9fb3ee56a1437f96f28afb1ff7f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/448a71a0e47b91809eb578fd931e4b3b359ab6d145ff4b348d40842a9d37c041"} {"level":"debug","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7eedb15ff0af39ab93dd78ea24e525d64e37d9fb3ee56a1437f96f28afb1ff7f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4328ee8fc8f24dd2c0c663d2fb34abe2b1f7af5f2ed3ed1b4d822e115766fbea"} {"level":"info","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7eedb15ff0af39ab93dd78ea24e525d64e37d9fb3ee56a1437f96f28afb1ff7f"} {"level":"debug","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7eedb15ff0af39ab93dd78ea24e525d64e37d9fb3ee56a1437f96f28afb1ff7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:35:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:35:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7eedb15ff0af39ab93dd78ea24e525d64e37d9fb3ee56a1437f96f28afb1ff7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7eedb15ff0af39ab93dd78ea24e525d64e37d9fb3ee56a1437f96f28afb1ff7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7eedb15ff0af39ab93dd78ea24e525d64e37d9fb3ee56a1437f96f28afb1ff7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:35:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:35:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7eedb15ff0af39ab93dd78ea24e525d64e37d9fb3ee56a1437f96f28afb1ff7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04fbdcfd55057a62a2a197b354294718667d0d7028566718c19a96fd1f476210","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:35:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:35:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7eedb15ff0af39ab93dd78ea24e525d64e37d9fb3ee56a1437f96f28afb1ff7f"} {"level":"info","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04fbdcfd55057a62a2a197b354294718667d0d7028566718c19a96fd1f476210","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7eedb15ff0af39ab93dd78ea24e525d64e37d9fb3ee56a1437f96f28afb1ff7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:35:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:35:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7eedb15ff0af39ab93dd78ea24e525d64e37d9fb3ee56a1437f96f28afb1ff7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7eedb15ff0af39ab93dd78ea24e525d64e37d9fb3ee56a1437f96f28afb1ff7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04fbdcfd55057a62a2a197b354294718667d0d7028566718c19a96fd1f476210","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:35:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:35:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04fbdcfd55057a62a2a197b354294718667d0d7028566718c19a96fd1f476210"} {"level":"info","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04fbdcfd55057a62a2a197b354294718667d0d7028566718c19a96fd1f476210","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7eedb15ff0af39ab93dd78ea24e525d64e37d9fb3ee56a1437f96f28afb1ff7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:35:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:35:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7eedb15ff0af39ab93dd78ea24e525d64e37d9fb3ee56a1437f96f28afb1ff7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04fbdcfd55057a62a2a197b354294718667d0d7028566718c19a96fd1f476210","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:35:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:35:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04fbdcfd55057a62a2a197b354294718667d0d7028566718c19a96fd1f476210"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7eedb15ff0af39ab93dd78ea24e525d64e37d9fb3ee56a1437f96f28afb1ff7f"} {"level":"info","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04fbdcfd55057a62a2a197b354294718667d0d7028566718c19a96fd1f476210","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7eedb15ff0af39ab93dd78ea24e525d64e37d9fb3ee56a1437f96f28afb1ff7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:35:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:35:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7eedb15ff0af39ab93dd78ea24e525d64e37d9fb3ee56a1437f96f28afb1ff7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04fbdcfd55057a62a2a197b354294718667d0d7028566718c19a96fd1f476210"} {"level":"info","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7eedb15ff0af39ab93dd78ea24e525d64e37d9fb3ee56a1437f96f28afb1ff7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04fbdcfd55057a62a2a197b354294718667d0d7028566718c19a96fd1f476210","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7eedb15ff0af39ab93dd78ea24e525d64e37d9fb3ee56a1437f96f28afb1ff7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:35:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:35:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7eedb15ff0af39ab93dd78ea24e525d64e37d9fb3ee56a1437f96f28afb1ff7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:35:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:35:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7eedb15ff0af39ab93dd78ea24e525d64e37d9fb3ee56a1437f96f28afb1ff7f"} {"level":"info","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7eedb15ff0af39ab93dd78ea24e525d64e37d9fb3ee56a1437f96f28afb1ff7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:35:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:35:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7eedb15ff0af39ab93dd78ea24e525d64e37d9fb3ee56a1437f96f28afb1ff7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7eedb15ff0af39ab93dd78ea24e525d64e37d9fb3ee56a1437f96f28afb1ff7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7eedb15ff0af39ab93dd78ea24e525d64e37d9fb3ee56a1437f96f28afb1ff7f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04fbdcfd55057a62a2a197b354294718667d0d7028566718c19a96fd1f476210"} {"level":"debug","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:35:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:35:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4"} {"level":"debug","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:35:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:35:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7eedb15ff0af39ab93dd78ea24e525d64e37d9fb3ee56a1437f96f28afb1ff7f"} {"level":"debug","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:35:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:35:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6ef2ca93dbc5c03a9da948db0b67db4210a1191dac8965f337971bc2c1997bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:35:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:35:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4"} {"level":"info","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6ef2ca93dbc5c03a9da948db0b67db4210a1191dac8965f337971bc2c1997bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:35:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:35:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6ef2ca93dbc5c03a9da948db0b67db4210a1191dac8965f337971bc2c1997bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:35:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:35:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6ef2ca93dbc5c03a9da948db0b67db4210a1191dac8965f337971bc2c1997bc"} {"level":"info","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6ef2ca93dbc5c03a9da948db0b67db4210a1191dac8965f337971bc2c1997bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:35:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:35:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4"} {"level":"info","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6ef2ca93dbc5c03a9da948db0b67db4210a1191dac8965f337971bc2c1997bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:35:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:35:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:35:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:35:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6ef2ca93dbc5c03a9da948db0b67db4210a1191dac8965f337971bc2c1997bc"} {"level":"error","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6ef2ca93dbc5c03a9da948db0b67db4210a1191dac8965f337971bc2c1997bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:35:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:35:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6ef2ca93dbc5c03a9da948db0b67db4210a1191dac8965f337971bc2c1997bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6ef2ca93dbc5c03a9da948db0b67db4210a1191dac8965f337971bc2c1997bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:35:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:35:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4"} {"level":"info","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6ef2ca93dbc5c03a9da948db0b67db4210a1191dac8965f337971bc2c1997bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:35:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:35:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6ef2ca93dbc5c03a9da948db0b67db4210a1191dac8965f337971bc2c1997bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:35:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:35:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6ef2ca93dbc5c03a9da948db0b67db4210a1191dac8965f337971bc2c1997bc"} {"level":"info","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6ef2ca93dbc5c03a9da948db0b67db4210a1191dac8965f337971bc2c1997bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:35:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:35:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6ef2ca93dbc5c03a9da948db0b67db4210a1191dac8965f337971bc2c1997bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6ef2ca93dbc5c03a9da948db0b67db4210a1191dac8965f337971bc2c1997bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:35:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:35:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4"} {"level":"info","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6ef2ca93dbc5c03a9da948db0b67db4210a1191dac8965f337971bc2c1997bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:35:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:35:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6ef2ca93dbc5c03a9da948db0b67db4210a1191dac8965f337971bc2c1997bc"} {"level":"info","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6ef2ca93dbc5c03a9da948db0b67db4210a1191dac8965f337971bc2c1997bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6ef2ca93dbc5c03a9da948db0b67db4210a1191dac8965f337971bc2c1997bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:35:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:35:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6ef2ca93dbc5c03a9da948db0b67db4210a1191dac8965f337971bc2c1997bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6ef2ca93dbc5c03a9da948db0b67db4210a1191dac8965f337971bc2c1997bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f771806356c8c7e1968379a0fbbed76bd0d1d87c0ee0b03c55fbdcef2274321c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:35:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:35:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4"} {"level":"info","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6ef2ca93dbc5c03a9da948db0b67db4210a1191dac8965f337971bc2c1997bc"} {"level":"info","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f771806356c8c7e1968379a0fbbed76bd0d1d87c0ee0b03c55fbdcef2274321c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:35:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:35:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f771806356c8c7e1968379a0fbbed76bd0d1d87c0ee0b03c55fbdcef2274321c"} {"level":"info","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f771806356c8c7e1968379a0fbbed76bd0d1d87c0ee0b03c55fbdcef2274321c"} {"level":"info","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6ef2ca93dbc5c03a9da948db0b67db4210a1191dac8965f337971bc2c1997bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f771806356c8c7e1968379a0fbbed76bd0d1d87c0ee0b03c55fbdcef2274321c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:35:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:35:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f771806356c8c7e1968379a0fbbed76bd0d1d87c0ee0b03c55fbdcef2274321c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4"} {"level":"info","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f771806356c8c7e1968379a0fbbed76bd0d1d87c0ee0b03c55fbdcef2274321c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f771806356c8c7e1968379a0fbbed76bd0d1d87c0ee0b03c55fbdcef2274321c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f771806356c8c7e1968379a0fbbed76bd0d1d87c0ee0b03c55fbdcef2274321c"} {"level":"debug","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c4dc9402eb62d671a5269af1e677f9ede6834f2840979e3ce2e518f88274035","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:35:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:35:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c4dc9402eb62d671a5269af1e677f9ede6834f2840979e3ce2e518f88274035","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c4dc9402eb62d671a5269af1e677f9ede6834f2840979e3ce2e518f88274035","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c4dc9402eb62d671a5269af1e677f9ede6834f2840979e3ce2e518f88274035","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c4dc9402eb62d671a5269af1e677f9ede6834f2840979e3ce2e518f88274035"} {"level":"debug","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c4dc9402eb62d671a5269af1e677f9ede6834f2840979e3ce2e518f88274035","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c4dc9402eb62d671a5269af1e677f9ede6834f2840979e3ce2e518f88274035"} {"level":"debug","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c4dc9402eb62d671a5269af1e677f9ede6834f2840979e3ce2e518f88274035","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:35:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:35:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c4dc9402eb62d671a5269af1e677f9ede6834f2840979e3ce2e518f88274035"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c4dc9402eb62d671a5269af1e677f9ede6834f2840979e3ce2e518f88274035","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c4dc9402eb62d671a5269af1e677f9ede6834f2840979e3ce2e518f88274035","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:35:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:35:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c4dc9402eb62d671a5269af1e677f9ede6834f2840979e3ce2e518f88274035","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c4dc9402eb62d671a5269af1e677f9ede6834f2840979e3ce2e518f88274035","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c4dc9402eb62d671a5269af1e677f9ede6834f2840979e3ce2e518f88274035","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c4dc9402eb62d671a5269af1e677f9ede6834f2840979e3ce2e518f88274035"} {"level":"debug","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c4dc9402eb62d671a5269af1e677f9ede6834f2840979e3ce2e518f88274035","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c4dc9402eb62d671a5269af1e677f9ede6834f2840979e3ce2e518f88274035"} {"level":"debug","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c4dc9402eb62d671a5269af1e677f9ede6834f2840979e3ce2e518f88274035","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:35:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:35:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c4dc9402eb62d671a5269af1e677f9ede6834f2840979e3ce2e518f88274035"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c4dc9402eb62d671a5269af1e677f9ede6834f2840979e3ce2e518f88274035","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c4dc9402eb62d671a5269af1e677f9ede6834f2840979e3ce2e518f88274035","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:35:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:35:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c4dc9402eb62d671a5269af1e677f9ede6834f2840979e3ce2e518f88274035","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c4dc9402eb62d671a5269af1e677f9ede6834f2840979e3ce2e518f88274035","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c4dc9402eb62d671a5269af1e677f9ede6834f2840979e3ce2e518f88274035","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c4dc9402eb62d671a5269af1e677f9ede6834f2840979e3ce2e518f88274035"} {"level":"debug","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c4dc9402eb62d671a5269af1e677f9ede6834f2840979e3ce2e518f88274035","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c4dc9402eb62d671a5269af1e677f9ede6834f2840979e3ce2e518f88274035"} {"level":"debug","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c4dc9402eb62d671a5269af1e677f9ede6834f2840979e3ce2e518f88274035","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:35:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:35:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c4dc9402eb62d671a5269af1e677f9ede6834f2840979e3ce2e518f88274035"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c4dc9402eb62d671a5269af1e677f9ede6834f2840979e3ce2e518f88274035","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c4dc9402eb62d671a5269af1e677f9ede6834f2840979e3ce2e518f88274035","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c4dc9402eb62d671a5269af1e677f9ede6834f2840979e3ce2e518f88274035"} {"level":"debug","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"238448ab50d57e4094ecbf8f64c554eb04b92bab5fc630bbd95a61bb0caf5fe5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:35:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:35:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"238448ab50d57e4094ecbf8f64c554eb04b92bab5fc630bbd95a61bb0caf5fe5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"238448ab50d57e4094ecbf8f64c554eb04b92bab5fc630bbd95a61bb0caf5fe5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:35:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:35:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/238448ab50d57e4094ecbf8f64c554eb04b92bab5fc630bbd95a61bb0caf5fe5"} {"level":"info","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"238448ab50d57e4094ecbf8f64c554eb04b92bab5fc630bbd95a61bb0caf5fe5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"238448ab50d57e4094ecbf8f64c554eb04b92bab5fc630bbd95a61bb0caf5fe5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:35:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:35:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"238448ab50d57e4094ecbf8f64c554eb04b92bab5fc630bbd95a61bb0caf5fe5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"238448ab50d57e4094ecbf8f64c554eb04b92bab5fc630bbd95a61bb0caf5fe5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"238448ab50d57e4094ecbf8f64c554eb04b92bab5fc630bbd95a61bb0caf5fe5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"238448ab50d57e4094ecbf8f64c554eb04b92bab5fc630bbd95a61bb0caf5fe5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/238448ab50d57e4094ecbf8f64c554eb04b92bab5fc630bbd95a61bb0caf5fe5"} {"level":"info","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/238448ab50d57e4094ecbf8f64c554eb04b92bab5fc630bbd95a61bb0caf5fe5"} {"level":"debug","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"238448ab50d57e4094ecbf8f64c554eb04b92bab5fc630bbd95a61bb0caf5fe5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:35:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:35:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["238448ab50d57e4094ecbf8f64c554eb04b92bab5fc630bbd95a61bb0caf5fe5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"238448ab50d57e4094ecbf8f64c554eb04b92bab5fc630bbd95a61bb0caf5fe5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"238448ab50d57e4094ecbf8f64c554eb04b92bab5fc630bbd95a61bb0caf5fe5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:35:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:35:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"238448ab50d57e4094ecbf8f64c554eb04b92bab5fc630bbd95a61bb0caf5fe5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"238448ab50d57e4094ecbf8f64c554eb04b92bab5fc630bbd95a61bb0caf5fe5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"238448ab50d57e4094ecbf8f64c554eb04b92bab5fc630bbd95a61bb0caf5fe5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/238448ab50d57e4094ecbf8f64c554eb04b92bab5fc630bbd95a61bb0caf5fe5"} {"level":"debug","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"238448ab50d57e4094ecbf8f64c554eb04b92bab5fc630bbd95a61bb0caf5fe5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/238448ab50d57e4094ecbf8f64c554eb04b92bab5fc630bbd95a61bb0caf5fe5"} {"level":"debug","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"238448ab50d57e4094ecbf8f64c554eb04b92bab5fc630bbd95a61bb0caf5fe5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:35:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:35:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["238448ab50d57e4094ecbf8f64c554eb04b92bab5fc630bbd95a61bb0caf5fe5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"238448ab50d57e4094ecbf8f64c554eb04b92bab5fc630bbd95a61bb0caf5fe5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"238448ab50d57e4094ecbf8f64c554eb04b92bab5fc630bbd95a61bb0caf5fe5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:35:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:35:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"238448ab50d57e4094ecbf8f64c554eb04b92bab5fc630bbd95a61bb0caf5fe5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"238448ab50d57e4094ecbf8f64c554eb04b92bab5fc630bbd95a61bb0caf5fe5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"238448ab50d57e4094ecbf8f64c554eb04b92bab5fc630bbd95a61bb0caf5fe5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/238448ab50d57e4094ecbf8f64c554eb04b92bab5fc630bbd95a61bb0caf5fe5"} {"level":"debug","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"238448ab50d57e4094ecbf8f64c554eb04b92bab5fc630bbd95a61bb0caf5fe5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/238448ab50d57e4094ecbf8f64c554eb04b92bab5fc630bbd95a61bb0caf5fe5"} {"level":"debug","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"732724e4aa98bc2987ee7ffea76d18ed7c790c4c1d7e16188bbbbe384884648b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:35:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:35:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"732724e4aa98bc2987ee7ffea76d18ed7c790c4c1d7e16188bbbbe384884648b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"238448ab50d57e4094ecbf8f64c554eb04b92bab5fc630bbd95a61bb0caf5fe5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:35:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:35:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["238448ab50d57e4094ecbf8f64c554eb04b92bab5fc630bbd95a61bb0caf5fe5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/732724e4aa98bc2987ee7ffea76d18ed7c790c4c1d7e16188bbbbe384884648b"} {"level":"info","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"238448ab50d57e4094ecbf8f64c554eb04b92bab5fc630bbd95a61bb0caf5fe5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"732724e4aa98bc2987ee7ffea76d18ed7c790c4c1d7e16188bbbbe384884648b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"238448ab50d57e4094ecbf8f64c554eb04b92bab5fc630bbd95a61bb0caf5fe5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"732724e4aa98bc2987ee7ffea76d18ed7c790c4c1d7e16188bbbbe384884648b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/732724e4aa98bc2987ee7ffea76d18ed7c790c4c1d7e16188bbbbe384884648b"} {"level":"debug","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"732724e4aa98bc2987ee7ffea76d18ed7c790c4c1d7e16188bbbbe384884648b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:35:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:35:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["732724e4aa98bc2987ee7ffea76d18ed7c790c4c1d7e16188bbbbe384884648b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/238448ab50d57e4094ecbf8f64c554eb04b92bab5fc630bbd95a61bb0caf5fe5"} {"level":"info","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"732724e4aa98bc2987ee7ffea76d18ed7c790c4c1d7e16188bbbbe384884648b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"732724e4aa98bc2987ee7ffea76d18ed7c790c4c1d7e16188bbbbe384884648b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/732724e4aa98bc2987ee7ffea76d18ed7c790c4c1d7e16188bbbbe384884648b"} {"level":"debug","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8964eba5d74805172c87411b3872abdbe1ae6b9ab28c99a910b23721d44bd905","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:35:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:35:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8964eba5d74805172c87411b3872abdbe1ae6b9ab28c99a910b23721d44bd905","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8964eba5d74805172c87411b3872abdbe1ae6b9ab28c99a910b23721d44bd905","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8964eba5d74805172c87411b3872abdbe1ae6b9ab28c99a910b23721d44bd905","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8964eba5d74805172c87411b3872abdbe1ae6b9ab28c99a910b23721d44bd905"} {"level":"debug","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8964eba5d74805172c87411b3872abdbe1ae6b9ab28c99a910b23721d44bd905","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8964eba5d74805172c87411b3872abdbe1ae6b9ab28c99a910b23721d44bd905"} {"level":"debug","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8964eba5d74805172c87411b3872abdbe1ae6b9ab28c99a910b23721d44bd905","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:35:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:35:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8964eba5d74805172c87411b3872abdbe1ae6b9ab28c99a910b23721d44bd905"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8964eba5d74805172c87411b3872abdbe1ae6b9ab28c99a910b23721d44bd905","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8964eba5d74805172c87411b3872abdbe1ae6b9ab28c99a910b23721d44bd905","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cab9ee67c8c5b545e58eb290cd5aba7227ec829f7ff142af9f821dd28024423","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:35:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:35:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cab9ee67c8c5b545e58eb290cd5aba7227ec829f7ff142af9f821dd28024423","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6cab9ee67c8c5b545e58eb290cd5aba7227ec829f7ff142af9f821dd28024423","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8964eba5d74805172c87411b3872abdbe1ae6b9ab28c99a910b23721d44bd905"} {"level":"debug","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cab9ee67c8c5b545e58eb290cd5aba7227ec829f7ff142af9f821dd28024423","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:35:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:35:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6cab9ee67c8c5b545e58eb290cd5aba7227ec829f7ff142af9f821dd28024423"} {"level":"info","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cab9ee67c8c5b545e58eb290cd5aba7227ec829f7ff142af9f821dd28024423","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6cab9ee67c8c5b545e58eb290cd5aba7227ec829f7ff142af9f821dd28024423","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6cab9ee67c8c5b545e58eb290cd5aba7227ec829f7ff142af9f821dd28024423","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6cab9ee67c8c5b545e58eb290cd5aba7227ec829f7ff142af9f821dd28024423"} {"level":"debug","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18049312cd3281422dda1394e5520f86495afaeaac2c0bbe237c1cb3ed6a1dcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:35:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:35:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18049312cd3281422dda1394e5520f86495afaeaac2c0bbe237c1cb3ed6a1dcb"} {"level":"info","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18049312cd3281422dda1394e5520f86495afaeaac2c0bbe237c1cb3ed6a1dcb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18049312cd3281422dda1394e5520f86495afaeaac2c0bbe237c1cb3ed6a1dcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:35:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:35:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18049312cd3281422dda1394e5520f86495afaeaac2c0bbe237c1cb3ed6a1dcb"} {"level":"info","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18049312cd3281422dda1394e5520f86495afaeaac2c0bbe237c1cb3ed6a1dcb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cab9ee67c8c5b545e58eb290cd5aba7227ec829f7ff142af9f821dd28024423","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:35:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:35:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6cab9ee67c8c5b545e58eb290cd5aba7227ec829f7ff142af9f821dd28024423"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18049312cd3281422dda1394e5520f86495afaeaac2c0bbe237c1cb3ed6a1dcb"} {"level":"info","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cab9ee67c8c5b545e58eb290cd5aba7227ec829f7ff142af9f821dd28024423","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18049312cd3281422dda1394e5520f86495afaeaac2c0bbe237c1cb3ed6a1dcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:35:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:35:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18049312cd3281422dda1394e5520f86495afaeaac2c0bbe237c1cb3ed6a1dcb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6cab9ee67c8c5b545e58eb290cd5aba7227ec829f7ff142af9f821dd28024423"} {"level":"info","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18049312cd3281422dda1394e5520f86495afaeaac2c0bbe237c1cb3ed6a1dcb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6cab9ee67c8c5b545e58eb290cd5aba7227ec829f7ff142af9f821dd28024423","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0347e89a3494eba4701369824e8cf82bce06ec9f33c42dcf989d7d6f61e5b9db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:35:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:35:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0347e89a3494eba4701369824e8cf82bce06ec9f33c42dcf989d7d6f61e5b9db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18049312cd3281422dda1394e5520f86495afaeaac2c0bbe237c1cb3ed6a1dcb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0347e89a3494eba4701369824e8cf82bce06ec9f33c42dcf989d7d6f61e5b9db","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0347e89a3494eba4701369824e8cf82bce06ec9f33c42dcf989d7d6f61e5b9db"} {"level":"debug","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0347e89a3494eba4701369824e8cf82bce06ec9f33c42dcf989d7d6f61e5b9db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:35:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:35:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0347e89a3494eba4701369824e8cf82bce06ec9f33c42dcf989d7d6f61e5b9db"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0347e89a3494eba4701369824e8cf82bce06ec9f33c42dcf989d7d6f61e5b9db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0347e89a3494eba4701369824e8cf82bce06ec9f33c42dcf989d7d6f61e5b9db","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18049312cd3281422dda1394e5520f86495afaeaac2c0bbe237c1cb3ed6a1dcb"} {"level":"info","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0347e89a3494eba4701369824e8cf82bce06ec9f33c42dcf989d7d6f61e5b9db"} {"level":"debug","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:35:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:35:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9"} {"level":"debug","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9"} {"level":"debug","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:35:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:35:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:35:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:35:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9"} {"level":"debug","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9"} {"level":"debug","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:35:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:35:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:35:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:35:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9"} {"level":"debug","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9"} {"level":"debug","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:35:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:35:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9"} {"level":"debug","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:36:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:36:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9"} {"level":"debug","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9"} {"level":"debug","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:36:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:36:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:36:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:36:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9"} {"level":"debug","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9"} {"level":"debug","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:36:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:36:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9556fbbf1482fea39f704afebd0f20f2492618ad4f2d293cad091454e6164eff","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9"} {"level":"info","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9556fbbf1482fea39f704afebd0f20f2492618ad4f2d293cad091454e6164eff"} {"level":"debug","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:36:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:36:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4"} {"level":"debug","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4"} {"level":"debug","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:36:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:36:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:36:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:36:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4"} {"level":"debug","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4"} {"level":"debug","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:36:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:36:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d4164edcb14408157ee8d9a65ea3b72ab50d9e47d50b6e6c17f0c46bd35da9a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4"} {"level":"info","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d4164edcb14408157ee8d9a65ea3b72ab50d9e47d50b6e6c17f0c46bd35da9a"} {"level":"debug","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0347e89a3494eba4701369824e8cf82bce06ec9f33c42dcf989d7d6f61e5b9db","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0347e89a3494eba4701369824e8cf82bce06ec9f33c42dcf989d7d6f61e5b9db"} {"level":"debug","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e954dbef497be72c8b16865963b1cec5f813436a7db325e77b939c9c53958b1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e954dbef497be72c8b16865963b1cec5f813436a7db325e77b939c9c53958b1"} {"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04fbdcfd55057a62a2a197b354294718667d0d7028566718c19a96fd1f476210","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:36:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:36:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04fbdcfd55057a62a2a197b354294718667d0d7028566718c19a96fd1f476210","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04fbdcfd55057a62a2a197b354294718667d0d7028566718c19a96fd1f476210","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04fbdcfd55057a62a2a197b354294718667d0d7028566718c19a96fd1f476210","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04fbdcfd55057a62a2a197b354294718667d0d7028566718c19a96fd1f476210"} {"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04fbdcfd55057a62a2a197b354294718667d0d7028566718c19a96fd1f476210","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04fbdcfd55057a62a2a197b354294718667d0d7028566718c19a96fd1f476210"} {"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04fbdcfd55057a62a2a197b354294718667d0d7028566718c19a96fd1f476210","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:36:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:36:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04fbdcfd55057a62a2a197b354294718667d0d7028566718c19a96fd1f476210"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04fbdcfd55057a62a2a197b354294718667d0d7028566718c19a96fd1f476210","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04fbdcfd55057a62a2a197b354294718667d0d7028566718c19a96fd1f476210","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:36:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:36:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04fbdcfd55057a62a2a197b354294718667d0d7028566718c19a96fd1f476210","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c4dc9402eb62d671a5269af1e677f9ede6834f2840979e3ce2e518f88274035","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04fbdcfd55057a62a2a197b354294718667d0d7028566718c19a96fd1f476210","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04fbdcfd55057a62a2a197b354294718667d0d7028566718c19a96fd1f476210","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04fbdcfd55057a62a2a197b354294718667d0d7028566718c19a96fd1f476210"} {"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04fbdcfd55057a62a2a197b354294718667d0d7028566718c19a96fd1f476210","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:36:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:36:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04fbdcfd55057a62a2a197b354294718667d0d7028566718c19a96fd1f476210"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c4dc9402eb62d671a5269af1e677f9ede6834f2840979e3ce2e518f88274035"} {"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04fbdcfd55057a62a2a197b354294718667d0d7028566718c19a96fd1f476210","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04fbdcfd55057a62a2a197b354294718667d0d7028566718c19a96fd1f476210","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:36:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:36:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04fbdcfd55057a62a2a197b354294718667d0d7028566718c19a96fd1f476210","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04fbdcfd55057a62a2a197b354294718667d0d7028566718c19a96fd1f476210","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04fbdcfd55057a62a2a197b354294718667d0d7028566718c19a96fd1f476210"} {"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04fbdcfd55057a62a2a197b354294718667d0d7028566718c19a96fd1f476210","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04fbdcfd55057a62a2a197b354294718667d0d7028566718c19a96fd1f476210","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b0a2b074404259ae826e42e1a82fbd5924dea7b1e5afd0ab8b8081917880e9d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04fbdcfd55057a62a2a197b354294718667d0d7028566718c19a96fd1f476210"} {"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b0a2b074404259ae826e42e1a82fbd5924dea7b1e5afd0ab8b8081917880e9d"} {"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04fbdcfd55057a62a2a197b354294718667d0d7028566718c19a96fd1f476210","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:36:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:36:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04fbdcfd55057a62a2a197b354294718667d0d7028566718c19a96fd1f476210"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04fbdcfd55057a62a2a197b354294718667d0d7028566718c19a96fd1f476210","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04fbdcfd55057a62a2a197b354294718667d0d7028566718c19a96fd1f476210","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04fbdcfd55057a62a2a197b354294718667d0d7028566718c19a96fd1f476210"} {"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cab9ee67c8c5b545e58eb290cd5aba7227ec829f7ff142af9f821dd28024423","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:36:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:36:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cab9ee67c8c5b545e58eb290cd5aba7227ec829f7ff142af9f821dd28024423","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6cab9ee67c8c5b545e58eb290cd5aba7227ec829f7ff142af9f821dd28024423","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6cab9ee67c8c5b545e58eb290cd5aba7227ec829f7ff142af9f821dd28024423","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6cab9ee67c8c5b545e58eb290cd5aba7227ec829f7ff142af9f821dd28024423"} {"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6cab9ee67c8c5b545e58eb290cd5aba7227ec829f7ff142af9f821dd28024423","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6cab9ee67c8c5b545e58eb290cd5aba7227ec829f7ff142af9f821dd28024423"} {"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cab9ee67c8c5b545e58eb290cd5aba7227ec829f7ff142af9f821dd28024423","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:36:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:36:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6cab9ee67c8c5b545e58eb290cd5aba7227ec829f7ff142af9f821dd28024423"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cab9ee67c8c5b545e58eb290cd5aba7227ec829f7ff142af9f821dd28024423","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6cab9ee67c8c5b545e58eb290cd5aba7227ec829f7ff142af9f821dd28024423","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"732724e4aa98bc2987ee7ffea76d18ed7c790c4c1d7e16188bbbbe384884648b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6cab9ee67c8c5b545e58eb290cd5aba7227ec829f7ff142af9f821dd28024423"} {"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/732724e4aa98bc2987ee7ffea76d18ed7c790c4c1d7e16188bbbbe384884648b"} {"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0efe2b4768a44f8324e865b5777735eaabae17774e28c67ace4220c24847f863","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"448a71a0e47b91809eb578fd931e4b3b359ab6d145ff4b348d40842a9d37c041","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0efe2b4768a44f8324e865b5777735eaabae17774e28c67ace4220c24847f863"} {"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5be12b9fc485c506a85c1050d7b618faf8e73a8463fed9ef5f938fd8959b6a42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fe83e46a42548dadaa01a65a3c789332e908f79dcb111a2cf03d5c474f64c7c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/448a71a0e47b91809eb578fd931e4b3b359ab6d145ff4b348d40842a9d37c041"} {"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5be12b9fc485c506a85c1050d7b618faf8e73a8463fed9ef5f938fd8959b6a42"} {"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fe83e46a42548dadaa01a65a3c789332e908f79dcb111a2cf03d5c474f64c7c"} {"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4328ee8fc8f24dd2c0c663d2fb34abe2b1f7af5f2ed3ed1b4d822e115766fbea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:36:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:36:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4328ee8fc8f24dd2c0c663d2fb34abe2b1f7af5f2ed3ed1b4d822e115766fbea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4328ee8fc8f24dd2c0c663d2fb34abe2b1f7af5f2ed3ed1b4d822e115766fbea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18049312cd3281422dda1394e5520f86495afaeaac2c0bbe237c1cb3ed6a1dcb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4328ee8fc8f24dd2c0c663d2fb34abe2b1f7af5f2ed3ed1b4d822e115766fbea","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4328ee8fc8f24dd2c0c663d2fb34abe2b1f7af5f2ed3ed1b4d822e115766fbea"} {"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7eedb15ff0af39ab93dd78ea24e525d64e37d9fb3ee56a1437f96f28afb1ff7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4328ee8fc8f24dd2c0c663d2fb34abe2b1f7af5f2ed3ed1b4d822e115766fbea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:36:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:36:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4328ee8fc8f24dd2c0c663d2fb34abe2b1f7af5f2ed3ed1b4d822e115766fbea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18049312cd3281422dda1394e5520f86495afaeaac2c0bbe237c1cb3ed6a1dcb"} {"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4328ee8fc8f24dd2c0c663d2fb34abe2b1f7af5f2ed3ed1b4d822e115766fbea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6ef2ca93dbc5c03a9da948db0b67db4210a1191dac8965f337971bc2c1997bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4328ee8fc8f24dd2c0c663d2fb34abe2b1f7af5f2ed3ed1b4d822e115766fbea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:36:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:36:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4328ee8fc8f24dd2c0c663d2fb34abe2b1f7af5f2ed3ed1b4d822e115766fbea"} {"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4328ee8fc8f24dd2c0c663d2fb34abe2b1f7af5f2ed3ed1b4d822e115766fbea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4328ee8fc8f24dd2c0c663d2fb34abe2b1f7af5f2ed3ed1b4d822e115766fbea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:36:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:36:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4328ee8fc8f24dd2c0c663d2fb34abe2b1f7af5f2ed3ed1b4d822e115766fbea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4328ee8fc8f24dd2c0c663d2fb34abe2b1f7af5f2ed3ed1b4d822e115766fbea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4328ee8fc8f24dd2c0c663d2fb34abe2b1f7af5f2ed3ed1b4d822e115766fbea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:36:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:36:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4328ee8fc8f24dd2c0c663d2fb34abe2b1f7af5f2ed3ed1b4d822e115766fbea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7eedb15ff0af39ab93dd78ea24e525d64e37d9fb3ee56a1437f96f28afb1ff7f"} {"level":"error","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4328ee8fc8f24dd2c0c663d2fb34abe2b1f7af5f2ed3ed1b4d822e115766fbea","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4328ee8fc8f24dd2c0c663d2fb34abe2b1f7af5f2ed3ed1b4d822e115766fbea\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4328ee8fc8f24dd2c0c663d2fb34abe2b1f7af5f2ed3ed1b4d822e115766fbea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4328ee8fc8f24dd2c0c663d2fb34abe2b1f7af5f2ed3ed1b4d822e115766fbea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"238448ab50d57e4094ecbf8f64c554eb04b92bab5fc630bbd95a61bb0caf5fe5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6ef2ca93dbc5c03a9da948db0b67db4210a1191dac8965f337971bc2c1997bc"} {"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd72d769e3263a282ce6f15b1ca8c8023adaab7a9088c8b364e6e4eb93689301","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4328ee8fc8f24dd2c0c663d2fb34abe2b1f7af5f2ed3ed1b4d822e115766fbea"} {"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/238448ab50d57e4094ecbf8f64c554eb04b92bab5fc630bbd95a61bb0caf5fe5"} {"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd72d769e3263a282ce6f15b1ca8c8023adaab7a9088c8b364e6e4eb93689301"} {"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:36:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:36:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8964eba5d74805172c87411b3872abdbe1ae6b9ab28c99a910b23721d44bd905","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3"} {"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:36:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:36:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8964eba5d74805172c87411b3872abdbe1ae6b9ab28c99a910b23721d44bd905"} {"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f771806356c8c7e1968379a0fbbed76bd0d1d87c0ee0b03c55fbdcef2274321c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:36:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:36:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3"} {"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:36:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:36:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:36:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:36:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f771806356c8c7e1968379a0fbbed76bd0d1d87c0ee0b03c55fbdcef2274321c"} {"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:36:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:36:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3"} {"level":"debug","ts":"2026-07-09T04:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3"} {"level":"debug","ts":"2026-07-09T04:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:36:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:36:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T04:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T04:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T04:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3"} {"level":"info","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0f7f84a5-45ab-4a30-a190-619bb31dda85","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:44160","PortSpecifier":{"PortValue":44160}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0f7f84a5-45ab-4a30-a190-619bb31dda85","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6bd312.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0f7f84a5-45ab-4a30-a190-619bb31dda85","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:44160","PortSpecifier":{"PortValue":44160}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783571765,"nanos":601988205},"http":{"id":"0f7f84a5-45ab-4a30-a190-619bb31dda85","method":"POST","headers":{":authority":"e2e-shared-a-6bd312.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0f7f84a5-45ab-4a30-a190-619bb31dda85","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0f7f84a5-45ab-4a30-a190-619bb31dda85","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3462404a-d93a-4f63-9ebc-6c7f440ea30a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=98c488c9-b640-4da6-939b-4ae7b07b3478"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e705e1dce26e"]}} {"level":"debug","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0f7f84a5-45ab-4a30-a190-619bb31dda85","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e705e1dce26e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=98c488c9-b640-4da6-939b-4ae7b07b3478"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3462404a-d93a-4f63-9ebc-6c7f440ea30a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0efe2b4768a44f8324e865b5777735eaabae17774e28c67ace4220c24847f863"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6bd312.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f7f84a5-45ab-4a30-a190-619bb31dda85","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f7f84a5-45ab-4a30-a190-619bb31dda85","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f7f84a5-45ab-4a30-a190-619bb31dda85","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6bd312/rate-test-model-6bd312\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0f7f84a5-45ab-4a30-a190-619bb31dda85","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0f7f84a5-45ab-4a30-a190-619bb31dda85","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0f7f84a5-45ab-4a30-a190-619bb31dda85","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0f7f84a5-45ab-4a30-a190-619bb31dda85","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0f7f84a5-45ab-4a30-a190-619bb31dda85","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"86b49b1f-e7fd-4385-98b4-10ec0deb63a4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49948","PortSpecifier":{"PortValue":49948}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"86b49b1f-e7fd-4385-98b4-10ec0deb63a4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-589b59.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"86b49b1f-e7fd-4385-98b4-10ec0deb63a4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49948","PortSpecifier":{"PortValue":49948}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783571765,"nanos":642363125},"http":{"id":"86b49b1f-e7fd-4385-98b4-10ec0deb63a4","method":"POST","headers":{":authority":"e2e-shared-b-589b59.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"86b49b1f-e7fd-4385-98b4-10ec0deb63a4","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"86b49b1f-e7fd-4385-98b4-10ec0deb63a4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3462404a-d93a-4f63-9ebc-6c7f440ea30a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=98c488c9-b640-4da6-939b-4ae7b07b3478"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e705e1dce26e"]}} {"level":"debug","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"86b49b1f-e7fd-4385-98b4-10ec0deb63a4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e705e1dce26e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=98c488c9-b640-4da6-939b-4ae7b07b3478"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3462404a-d93a-4f63-9ebc-6c7f440ea30a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9556fbbf1482fea39f704afebd0f20f2492618ad4f2d293cad091454e6164eff"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-589b59.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86b49b1f-e7fd-4385-98b4-10ec0deb63a4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86b49b1f-e7fd-4385-98b4-10ec0deb63a4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86b49b1f-e7fd-4385-98b4-10ec0deb63a4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-589b59/rate-test-model-589b59\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"86b49b1f-e7fd-4385-98b4-10ec0deb63a4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86b49b1f-e7fd-4385-98b4-10ec0deb63a4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86b49b1f-e7fd-4385-98b4-10ec0deb63a4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"86b49b1f-e7fd-4385-98b4-10ec0deb63a4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"86b49b1f-e7fd-4385-98b4-10ec0deb63a4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"86a1e72c-93c3-4b84-add0-c814f17419ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:44162","PortSpecifier":{"PortValue":44162}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"86a1e72c-93c3-4b84-add0-c814f17419ec","method":"POST","path":"/ai-tenant-e2e-shared-a-6bd312/rate-test-model-6bd312/v1/completions","host":"e2e-shared-a-6bd312.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"86a1e72c-93c3-4b84-add0-c814f17419ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:44162","PortSpecifier":{"PortValue":44162}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783571765,"nanos":682903752},"http":{"id":"86a1e72c-93c3-4b84-add0-c814f17419ec","method":"POST","headers":{":authority":"e2e-shared-a-6bd312.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6bd312/rate-test-model-6bd312/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"86a1e72c-93c3-4b84-add0-c814f17419ec","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-XqY0vBYzSkUurE5I_k0nfFgEHwmAGCVy37RdgGIVVgB3Ph8jvt9PabXLqR6d"} {"level":"debug","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"86a1e72c-93c3-4b84-add0-c814f17419ec","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6bd312.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-XqY0vBYzSkUurE5I_k0nfFgEHwmAGCVy37RdgGIVVgB3Ph8jvt9PabXLqR6d\"}"} {"level":"debug","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"86a1e72c-93c3-4b84-add0-c814f17419ec","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6bd312.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"30bd9db0-9961-4161-a387-c581f31f490d","keyName":"e2e-rate-a-77f3bf","subscription":"e2e-rate-iso-a-77f3bf","tenant":"e2e-shared-a-6bd312","userId":"30bd9db0-9961-4161-a387-c581f31f490d","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"86a1e72c-93c3-4b84-add0-c814f17419ec","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6bd312.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6bd312/rate-test-model-6bd312\",\"requestedSubscription\":\"e2e-rate-iso-a-77f3bf\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"86a1e72c-93c3-4b84-add0-c814f17419ec","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6bd312.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6bd312","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-77f3bf","namespace":"ai-tenant-e2e-shared-a-6bd312","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"86a1e72c-93c3-4b84-add0-c814f17419ec","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86a1e72c-93c3-4b84-add0-c814f17419ec","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86a1e72c-93c3-4b84-add0-c814f17419ec","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86a1e72c-93c3-4b84-add0-c814f17419ec","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86a1e72c-93c3-4b84-add0-c814f17419ec","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6bd312/rate-test-model-6bd312\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86a1e72c-93c3-4b84-add0-c814f17419ec","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86a1e72c-93c3-4b84-add0-c814f17419ec","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86a1e72c-93c3-4b84-add0-c814f17419ec","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-77f3bf"} {"level":"debug","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86a1e72c-93c3-4b84-add0-c814f17419ec","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"30bd9db0-9961-4161-a387-c581f31f490d","keyName":"e2e-rate-a-77f3bf","selected_subscription":"e2e-rate-iso-a-77f3bf","selected_subscription_key":"ai-tenant-e2e-shared-a-6bd312/e2e-rate-iso-a-77f3bf@ai-tenant-e2e-shared-a-6bd312/rate-test-model-6bd312","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6bd312","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-77f3bf","namespace":"ai-tenant-e2e-shared-a-6bd312","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"86a1e72c-93c3-4b84-add0-c814f17419ec","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"86a1e72c-93c3-4b84-add0-c814f17419ec","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T04:36:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e663d352-e9fd-4d17-924c-909b77f9e93c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:44178","PortSpecifier":{"PortValue":44178}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e663d352-e9fd-4d17-924c-909b77f9e93c","method":"POST","path":"/ai-tenant-e2e-shared-a-6bd312/rate-test-model-6bd312/v1/completions","host":"e2e-shared-a-6bd312.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T04:36:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e663d352-e9fd-4d17-924c-909b77f9e93c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:44178","PortSpecifier":{"PortValue":44178}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783571766,"nanos":740842586},"http":{"id":"e663d352-e9fd-4d17-924c-909b77f9e93c","method":"POST","headers":{":authority":"e2e-shared-a-6bd312.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6bd312/rate-test-model-6bd312/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T04:36:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e663d352-e9fd-4d17-924c-909b77f9e93c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-XqY0vBYzSkUurE5I_k0nfFgEHwmAGCVy37RdgGIVVgB3Ph8jvt9PabXLqR6d"} {"level":"debug","ts":"2026-07-09T04:36:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e663d352-e9fd-4d17-924c-909b77f9e93c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6bd312.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-XqY0vBYzSkUurE5I_k0nfFgEHwmAGCVy37RdgGIVVgB3Ph8jvt9PabXLqR6d\"}"} {"level":"debug","ts":"2026-07-09T04:36:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e663d352-e9fd-4d17-924c-909b77f9e93c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6bd312.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"30bd9db0-9961-4161-a387-c581f31f490d","keyName":"e2e-rate-a-77f3bf","subscription":"e2e-rate-iso-a-77f3bf","tenant":"e2e-shared-a-6bd312","userId":"30bd9db0-9961-4161-a387-c581f31f490d","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-09T04:36:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e663d352-e9fd-4d17-924c-909b77f9e93c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6bd312.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6bd312/rate-test-model-6bd312\",\"requestedSubscription\":\"e2e-rate-iso-a-77f3bf\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-09T04:36:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e663d352-e9fd-4d17-924c-909b77f9e93c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6bd312.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6bd312","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-77f3bf","namespace":"ai-tenant-e2e-shared-a-6bd312","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-09T04:36:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e663d352-e9fd-4d17-924c-909b77f9e93c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T04:36:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e663d352-e9fd-4d17-924c-909b77f9e93c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:36:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e663d352-e9fd-4d17-924c-909b77f9e93c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:36:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e663d352-e9fd-4d17-924c-909b77f9e93c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6bd312/rate-test-model-6bd312\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:36:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e663d352-e9fd-4d17-924c-909b77f9e93c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:36:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e663d352-e9fd-4d17-924c-909b77f9e93c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T04:36:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e663d352-e9fd-4d17-924c-909b77f9e93c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-77f3bf"} {"level":"debug","ts":"2026-07-09T04:36:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e663d352-e9fd-4d17-924c-909b77f9e93c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-09T04:36:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e663d352-e9fd-4d17-924c-909b77f9e93c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"30bd9db0-9961-4161-a387-c581f31f490d","keyName":"e2e-rate-a-77f3bf","selected_subscription":"e2e-rate-iso-a-77f3bf","selected_subscription_key":"ai-tenant-e2e-shared-a-6bd312/e2e-rate-iso-a-77f3bf@ai-tenant-e2e-shared-a-6bd312/rate-test-model-6bd312","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6bd312","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-77f3bf","namespace":"ai-tenant-e2e-shared-a-6bd312","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-09T04:36:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e663d352-e9fd-4d17-924c-909b77f9e93c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T04:36:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e663d352-e9fd-4d17-924c-909b77f9e93c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T04:36:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7655b47e-8398-452f-8c46-650a2a46439e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:44194","PortSpecifier":{"PortValue":44194}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7655b47e-8398-452f-8c46-650a2a46439e","method":"POST","path":"/ai-tenant-e2e-shared-a-6bd312/rate-test-model-6bd312/v1/completions","host":"e2e-shared-a-6bd312.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T04:36:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7655b47e-8398-452f-8c46-650a2a46439e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:44194","PortSpecifier":{"PortValue":44194}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783571767,"nanos":779985142},"http":{"id":"7655b47e-8398-452f-8c46-650a2a46439e","method":"POST","headers":{":authority":"e2e-shared-a-6bd312.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6bd312/rate-test-model-6bd312/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T04:36:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7655b47e-8398-452f-8c46-650a2a46439e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-XqY0vBYzSkUurE5I_k0nfFgEHwmAGCVy37RdgGIVVgB3Ph8jvt9PabXLqR6d"} {"level":"debug","ts":"2026-07-09T04:36:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7655b47e-8398-452f-8c46-650a2a46439e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6bd312.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-XqY0vBYzSkUurE5I_k0nfFgEHwmAGCVy37RdgGIVVgB3Ph8jvt9PabXLqR6d\"}"} {"level":"debug","ts":"2026-07-09T04:36:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7655b47e-8398-452f-8c46-650a2a46439e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6bd312.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"30bd9db0-9961-4161-a387-c581f31f490d","keyName":"e2e-rate-a-77f3bf","subscription":"e2e-rate-iso-a-77f3bf","tenant":"e2e-shared-a-6bd312","userId":"30bd9db0-9961-4161-a387-c581f31f490d","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-09T04:36:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7655b47e-8398-452f-8c46-650a2a46439e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6bd312.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6bd312/rate-test-model-6bd312\",\"requestedSubscription\":\"e2e-rate-iso-a-77f3bf\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-09T04:36:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7655b47e-8398-452f-8c46-650a2a46439e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6bd312.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6bd312","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-77f3bf","namespace":"ai-tenant-e2e-shared-a-6bd312","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-09T04:36:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7655b47e-8398-452f-8c46-650a2a46439e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T04:36:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7655b47e-8398-452f-8c46-650a2a46439e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:36:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7655b47e-8398-452f-8c46-650a2a46439e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:36:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7655b47e-8398-452f-8c46-650a2a46439e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6bd312/rate-test-model-6bd312\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:36:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7655b47e-8398-452f-8c46-650a2a46439e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:36:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7655b47e-8398-452f-8c46-650a2a46439e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T04:36:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7655b47e-8398-452f-8c46-650a2a46439e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-09T04:36:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7655b47e-8398-452f-8c46-650a2a46439e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-77f3bf"} {"level":"debug","ts":"2026-07-09T04:36:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7655b47e-8398-452f-8c46-650a2a46439e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"30bd9db0-9961-4161-a387-c581f31f490d","keyName":"e2e-rate-a-77f3bf","selected_subscription":"e2e-rate-iso-a-77f3bf","selected_subscription_key":"ai-tenant-e2e-shared-a-6bd312/e2e-rate-iso-a-77f3bf@ai-tenant-e2e-shared-a-6bd312/rate-test-model-6bd312","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6bd312","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-77f3bf","namespace":"ai-tenant-e2e-shared-a-6bd312","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-09T04:36:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7655b47e-8398-452f-8c46-650a2a46439e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T04:36:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7655b47e-8398-452f-8c46-650a2a46439e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0c0ebfc6-ea96-4d79-92ad-7678048d4daf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39378","PortSpecifier":{"PortValue":39378}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0c0ebfc6-ea96-4d79-92ad-7678048d4daf","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6bd312.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0c0ebfc6-ea96-4d79-92ad-7678048d4daf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39378","PortSpecifier":{"PortValue":39378}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783571780,"nanos":536799982},"http":{"id":"0c0ebfc6-ea96-4d79-92ad-7678048d4daf","method":"POST","headers":{":authority":"e2e-shared-a-6bd312.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0c0ebfc6-ea96-4d79-92ad-7678048d4daf","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0c0ebfc6-ea96-4d79-92ad-7678048d4daf","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3462404a-d93a-4f63-9ebc-6c7f440ea30a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=98c488c9-b640-4da6-939b-4ae7b07b3478"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e705e1dce26e"]}} {"level":"debug","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0c0ebfc6-ea96-4d79-92ad-7678048d4daf","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e705e1dce26e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=98c488c9-b640-4da6-939b-4ae7b07b3478"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3462404a-d93a-4f63-9ebc-6c7f440ea30a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0efe2b4768a44f8324e865b5777735eaabae17774e28c67ace4220c24847f863"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6bd312.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c0ebfc6-ea96-4d79-92ad-7678048d4daf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c0ebfc6-ea96-4d79-92ad-7678048d4daf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c0ebfc6-ea96-4d79-92ad-7678048d4daf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6bd312/rate-test-model-6bd312\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0c0ebfc6-ea96-4d79-92ad-7678048d4daf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c0ebfc6-ea96-4d79-92ad-7678048d4daf","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c0ebfc6-ea96-4d79-92ad-7678048d4daf","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0c0ebfc6-ea96-4d79-92ad-7678048d4daf","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0c0ebfc6-ea96-4d79-92ad-7678048d4daf","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6c092ae5-0cb0-4aa6-aadd-3053a1407893","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:40474","PortSpecifier":{"PortValue":40474}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6c092ae5-0cb0-4aa6-aadd-3053a1407893","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-589b59.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6c092ae5-0cb0-4aa6-aadd-3053a1407893","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:40474","PortSpecifier":{"PortValue":40474}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783571780,"nanos":581277143},"http":{"id":"6c092ae5-0cb0-4aa6-aadd-3053a1407893","method":"POST","headers":{":authority":"e2e-shared-b-589b59.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6c092ae5-0cb0-4aa6-aadd-3053a1407893","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6c092ae5-0cb0-4aa6-aadd-3053a1407893","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3462404a-d93a-4f63-9ebc-6c7f440ea30a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=98c488c9-b640-4da6-939b-4ae7b07b3478"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e705e1dce26e"]}} {"level":"debug","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6c092ae5-0cb0-4aa6-aadd-3053a1407893","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e705e1dce26e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=98c488c9-b640-4da6-939b-4ae7b07b3478"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3462404a-d93a-4f63-9ebc-6c7f440ea30a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9556fbbf1482fea39f704afebd0f20f2492618ad4f2d293cad091454e6164eff"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-589b59.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c092ae5-0cb0-4aa6-aadd-3053a1407893","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c092ae5-0cb0-4aa6-aadd-3053a1407893","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c092ae5-0cb0-4aa6-aadd-3053a1407893","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-589b59/rate-test-model-589b59\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6c092ae5-0cb0-4aa6-aadd-3053a1407893","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6c092ae5-0cb0-4aa6-aadd-3053a1407893","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6c092ae5-0cb0-4aa6-aadd-3053a1407893","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6c092ae5-0cb0-4aa6-aadd-3053a1407893","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6c092ae5-0cb0-4aa6-aadd-3053a1407893","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d8ea4bf8-4cd9-4813-8014-cc6d0418dc52","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39384","PortSpecifier":{"PortValue":39384}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d8ea4bf8-4cd9-4813-8014-cc6d0418dc52","method":"POST","path":"/ai-tenant-e2e-shared-a-6bd312/rate-test-model-6bd312/v1/completions","host":"e2e-shared-a-6bd312.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d8ea4bf8-4cd9-4813-8014-cc6d0418dc52","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39384","PortSpecifier":{"PortValue":39384}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783571780,"nanos":626332662},"http":{"id":"d8ea4bf8-4cd9-4813-8014-cc6d0418dc52","method":"POST","headers":{":authority":"e2e-shared-a-6bd312.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6bd312/rate-test-model-6bd312/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d8ea4bf8-4cd9-4813-8014-cc6d0418dc52","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-wWfIa77aLydJdu04_Oqf1x0EE1DZ9Oa4hzOYNyLmGnSkkOCTJYN2LvaeGaCs"} {"level":"debug","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d8ea4bf8-4cd9-4813-8014-cc6d0418dc52","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6bd312.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-wWfIa77aLydJdu04_Oqf1x0EE1DZ9Oa4hzOYNyLmGnSkkOCTJYN2LvaeGaCs\"}"} {"level":"debug","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d8ea4bf8-4cd9-4813-8014-cc6d0418dc52","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6bd312.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e86a1269-34c9-45ed-9382-ff162053b6b0","keyName":"e2e-rate-a-302fa3","subscription":"e2e-rate-iso-a-302fa3","tenant":"e2e-shared-a-6bd312","userId":"e86a1269-34c9-45ed-9382-ff162053b6b0","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d8ea4bf8-4cd9-4813-8014-cc6d0418dc52","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6bd312.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6bd312/rate-test-model-6bd312\",\"requestedSubscription\":\"e2e-rate-iso-a-302fa3\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d8ea4bf8-4cd9-4813-8014-cc6d0418dc52","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6bd312.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6bd312","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-302fa3","namespace":"ai-tenant-e2e-shared-a-6bd312","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d8ea4bf8-4cd9-4813-8014-cc6d0418dc52","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d8ea4bf8-4cd9-4813-8014-cc6d0418dc52","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d8ea4bf8-4cd9-4813-8014-cc6d0418dc52","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d8ea4bf8-4cd9-4813-8014-cc6d0418dc52","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6bd312/rate-test-model-6bd312\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d8ea4bf8-4cd9-4813-8014-cc6d0418dc52","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d8ea4bf8-4cd9-4813-8014-cc6d0418dc52","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d8ea4bf8-4cd9-4813-8014-cc6d0418dc52","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d8ea4bf8-4cd9-4813-8014-cc6d0418dc52","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-302fa3"} {"level":"debug","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d8ea4bf8-4cd9-4813-8014-cc6d0418dc52","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e86a1269-34c9-45ed-9382-ff162053b6b0","keyName":"e2e-rate-a-302fa3","selected_subscription":"e2e-rate-iso-a-302fa3","selected_subscription_key":"ai-tenant-e2e-shared-a-6bd312/e2e-rate-iso-a-302fa3@ai-tenant-e2e-shared-a-6bd312/rate-test-model-6bd312","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6bd312","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-302fa3","namespace":"ai-tenant-e2e-shared-a-6bd312","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d8ea4bf8-4cd9-4813-8014-cc6d0418dc52","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d8ea4bf8-4cd9-4813-8014-cc6d0418dc52","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T04:36:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c3e3457d-916e-471b-b861-eedceecd8a1b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39398","PortSpecifier":{"PortValue":39398}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c3e3457d-916e-471b-b861-eedceecd8a1b","method":"POST","path":"/ai-tenant-e2e-shared-a-6bd312/rate-test-model-6bd312/v1/completions","host":"e2e-shared-a-6bd312.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T04:36:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c3e3457d-916e-471b-b861-eedceecd8a1b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39398","PortSpecifier":{"PortValue":39398}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783571781,"nanos":665768392},"http":{"id":"c3e3457d-916e-471b-b861-eedceecd8a1b","method":"POST","headers":{":authority":"e2e-shared-a-6bd312.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6bd312/rate-test-model-6bd312/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T04:36:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c3e3457d-916e-471b-b861-eedceecd8a1b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-wWfIa77aLydJdu04_Oqf1x0EE1DZ9Oa4hzOYNyLmGnSkkOCTJYN2LvaeGaCs"} {"level":"debug","ts":"2026-07-09T04:36:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c3e3457d-916e-471b-b861-eedceecd8a1b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6bd312.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-wWfIa77aLydJdu04_Oqf1x0EE1DZ9Oa4hzOYNyLmGnSkkOCTJYN2LvaeGaCs\"}"} {"level":"debug","ts":"2026-07-09T04:36:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c3e3457d-916e-471b-b861-eedceecd8a1b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6bd312.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e86a1269-34c9-45ed-9382-ff162053b6b0","keyName":"e2e-rate-a-302fa3","subscription":"e2e-rate-iso-a-302fa3","tenant":"e2e-shared-a-6bd312","userId":"e86a1269-34c9-45ed-9382-ff162053b6b0","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-09T04:36:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c3e3457d-916e-471b-b861-eedceecd8a1b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6bd312.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6bd312/rate-test-model-6bd312\",\"requestedSubscription\":\"e2e-rate-iso-a-302fa3\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-09T04:36:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c3e3457d-916e-471b-b861-eedceecd8a1b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6bd312.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6bd312","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-302fa3","namespace":"ai-tenant-e2e-shared-a-6bd312","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-09T04:36:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c3e3457d-916e-471b-b861-eedceecd8a1b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T04:36:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3e3457d-916e-471b-b861-eedceecd8a1b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:36:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3e3457d-916e-471b-b861-eedceecd8a1b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:36:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3e3457d-916e-471b-b861-eedceecd8a1b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:36:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3e3457d-916e-471b-b861-eedceecd8a1b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6bd312/rate-test-model-6bd312\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:36:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3e3457d-916e-471b-b861-eedceecd8a1b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T04:36:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3e3457d-916e-471b-b861-eedceecd8a1b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-302fa3"} {"level":"debug","ts":"2026-07-09T04:36:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3e3457d-916e-471b-b861-eedceecd8a1b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-09T04:36:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3e3457d-916e-471b-b861-eedceecd8a1b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e86a1269-34c9-45ed-9382-ff162053b6b0","keyName":"e2e-rate-a-302fa3","selected_subscription":"e2e-rate-iso-a-302fa3","selected_subscription_key":"ai-tenant-e2e-shared-a-6bd312/e2e-rate-iso-a-302fa3@ai-tenant-e2e-shared-a-6bd312/rate-test-model-6bd312","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6bd312","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-302fa3","namespace":"ai-tenant-e2e-shared-a-6bd312","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-09T04:36:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c3e3457d-916e-471b-b861-eedceecd8a1b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T04:36:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c3e3457d-916e-471b-b861-eedceecd8a1b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T04:36:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"81236341-cd65-900f-9a1c-e30a6f3d5130","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39410","PortSpecifier":{"PortValue":39410}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"81236341-cd65-900f-9a1c-e30a6f3d5130","method":"POST","path":"/ai-tenant-e2e-shared-a-6bd312/rate-test-model-6bd312/v1/completions","host":"e2e-shared-a-6bd312.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T04:36:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"81236341-cd65-900f-9a1c-e30a6f3d5130","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39410","PortSpecifier":{"PortValue":39410}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783571782,"nanos":700749011},"http":{"id":"81236341-cd65-900f-9a1c-e30a6f3d5130","method":"POST","headers":{":authority":"e2e-shared-a-6bd312.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6bd312/rate-test-model-6bd312/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T04:36:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"81236341-cd65-900f-9a1c-e30a6f3d5130","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-wWfIa77aLydJdu04_Oqf1x0EE1DZ9Oa4hzOYNyLmGnSkkOCTJYN2LvaeGaCs"} {"level":"debug","ts":"2026-07-09T04:36:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"81236341-cd65-900f-9a1c-e30a6f3d5130","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6bd312.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-wWfIa77aLydJdu04_Oqf1x0EE1DZ9Oa4hzOYNyLmGnSkkOCTJYN2LvaeGaCs\"}"} {"level":"debug","ts":"2026-07-09T04:36:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"81236341-cd65-900f-9a1c-e30a6f3d5130","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6bd312.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e86a1269-34c9-45ed-9382-ff162053b6b0","keyName":"e2e-rate-a-302fa3","subscription":"e2e-rate-iso-a-302fa3","tenant":"e2e-shared-a-6bd312","userId":"e86a1269-34c9-45ed-9382-ff162053b6b0","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-09T04:36:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"81236341-cd65-900f-9a1c-e30a6f3d5130","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6bd312.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6bd312/rate-test-model-6bd312\",\"requestedSubscription\":\"e2e-rate-iso-a-302fa3\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-09T04:36:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"81236341-cd65-900f-9a1c-e30a6f3d5130","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6bd312.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6bd312","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-302fa3","namespace":"ai-tenant-e2e-shared-a-6bd312","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-09T04:36:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"81236341-cd65-900f-9a1c-e30a6f3d5130","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T04:36:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"81236341-cd65-900f-9a1c-e30a6f3d5130","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:36:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"81236341-cd65-900f-9a1c-e30a6f3d5130","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:36:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"81236341-cd65-900f-9a1c-e30a6f3d5130","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6bd312/rate-test-model-6bd312\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:36:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"81236341-cd65-900f-9a1c-e30a6f3d5130","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:36:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"81236341-cd65-900f-9a1c-e30a6f3d5130","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T04:36:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"81236341-cd65-900f-9a1c-e30a6f3d5130","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-302fa3"} {"level":"debug","ts":"2026-07-09T04:36:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"81236341-cd65-900f-9a1c-e30a6f3d5130","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-09T04:36:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"81236341-cd65-900f-9a1c-e30a6f3d5130","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e86a1269-34c9-45ed-9382-ff162053b6b0","keyName":"e2e-rate-a-302fa3","selected_subscription":"e2e-rate-iso-a-302fa3","selected_subscription_key":"ai-tenant-e2e-shared-a-6bd312/e2e-rate-iso-a-302fa3@ai-tenant-e2e-shared-a-6bd312/rate-test-model-6bd312","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6bd312","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-302fa3","namespace":"ai-tenant-e2e-shared-a-6bd312","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-09T04:36:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"81236341-cd65-900f-9a1c-e30a6f3d5130","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T04:36:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"81236341-cd65-900f-9a1c-e30a6f3d5130","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T04:36:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"50cfdb7f-fd06-4383-b767-2ee6104a864b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:40490","PortSpecifier":{"PortValue":40490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"50cfdb7f-fd06-4383-b767-2ee6104a864b","method":"POST","path":"/ai-tenant-e2e-shared-b-589b59/rate-test-model-589b59/v1/completions","host":"e2e-shared-b-589b59.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T04:36:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"50cfdb7f-fd06-4383-b767-2ee6104a864b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:40490","PortSpecifier":{"PortValue":40490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783571782,"nanos":732558918},"http":{"id":"50cfdb7f-fd06-4383-b767-2ee6104a864b","method":"POST","headers":{":authority":"e2e-shared-b-589b59.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-589b59/rate-test-model-589b59/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T04:36:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"50cfdb7f-fd06-4383-b767-2ee6104a864b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-157Y5et7R0IwUFd0R_RuFUPNCK22vfzpuj6l68zwUsQy7PA7V9dyCz4UvhPBC"} {"level":"debug","ts":"2026-07-09T04:36:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"50cfdb7f-fd06-4383-b767-2ee6104a864b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-589b59.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-157Y5et7R0IwUFd0R_RuFUPNCK22vfzpuj6l68zwUsQy7PA7V9dyCz4UvhPBC\"}"} {"level":"debug","ts":"2026-07-09T04:36:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"50cfdb7f-fd06-4383-b767-2ee6104a864b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-589b59.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6ac19b0c-69a4-43ee-ab2a-8f8a2e2db3da","keyName":"e2e-rate-b-302fa3","subscription":"e2e-rate-iso-b-302fa3","tenant":"e2e-shared-b-589b59","userId":"6ac19b0c-69a4-43ee-ab2a-8f8a2e2db3da","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-09T04:36:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"50cfdb7f-fd06-4383-b767-2ee6104a864b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-589b59.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-589b59/rate-test-model-589b59\",\"requestedSubscription\":\"e2e-rate-iso-b-302fa3\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-09T04:36:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"50cfdb7f-fd06-4383-b767-2ee6104a864b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-589b59.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-589b59","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-302fa3","namespace":"ai-tenant-e2e-shared-b-589b59","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-09T04:36:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"50cfdb7f-fd06-4383-b767-2ee6104a864b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T04:36:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50cfdb7f-fd06-4383-b767-2ee6104a864b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:36:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50cfdb7f-fd06-4383-b767-2ee6104a864b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:36:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50cfdb7f-fd06-4383-b767-2ee6104a864b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-589b59/rate-test-model-589b59\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:36:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50cfdb7f-fd06-4383-b767-2ee6104a864b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T04:36:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50cfdb7f-fd06-4383-b767-2ee6104a864b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T04:36:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50cfdb7f-fd06-4383-b767-2ee6104a864b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-09T04:36:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50cfdb7f-fd06-4383-b767-2ee6104a864b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-302fa3"} {"level":"debug","ts":"2026-07-09T04:36:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50cfdb7f-fd06-4383-b767-2ee6104a864b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6ac19b0c-69a4-43ee-ab2a-8f8a2e2db3da","keyName":"e2e-rate-b-302fa3","selected_subscription":"e2e-rate-iso-b-302fa3","selected_subscription_key":"ai-tenant-e2e-shared-b-589b59/e2e-rate-iso-b-302fa3@ai-tenant-e2e-shared-b-589b59/rate-test-model-589b59","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-589b59","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-302fa3","namespace":"ai-tenant-e2e-shared-b-589b59","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-09T04:36:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"50cfdb7f-fd06-4383-b767-2ee6104a864b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T04:36:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"50cfdb7f-fd06-4383-b767-2ee6104a864b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T04:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7eedb15ff0af39ab93dd78ea24e525d64e37d9fb3ee56a1437f96f28afb1ff7f"} {"level":"info","ts":"2026-07-09T04:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4"} {"level":"info","ts":"2026-07-09T04:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/448a71a0e47b91809eb578fd931e4b3b359ab6d145ff4b348d40842a9d37c041"} {"level":"info","ts":"2026-07-09T04:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4328ee8fc8f24dd2c0c663d2fb34abe2b1f7af5f2ed3ed1b4d822e115766fbea"} {"level":"info","ts":"2026-07-09T04:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/04fbdcfd55057a62a2a197b354294718667d0d7028566718c19a96fd1f476210"} {"level":"info","ts":"2026-07-09T04:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6e954dbef497be72c8b16865963b1cec5f813436a7db325e77b939c9c53958b1"} {"level":"info","ts":"2026-07-09T04:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e6ef2ca93dbc5c03a9da948db0b67db4210a1191dac8965f337971bc2c1997bc"} {"level":"info","ts":"2026-07-09T04:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f771806356c8c7e1968379a0fbbed76bd0d1d87c0ee0b03c55fbdcef2274321c"} {"level":"info","ts":"2026-07-09T04:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0347e89a3494eba4701369824e8cf82bce06ec9f33c42dcf989d7d6f61e5b9db"} {"level":"info","ts":"2026-07-09T04:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8964eba5d74805172c87411b3872abdbe1ae6b9ab28c99a910b23721d44bd905"} {"level":"info","ts":"2026-07-09T04:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6cab9ee67c8c5b545e58eb290cd5aba7227ec829f7ff142af9f821dd28024423"} {"level":"info","ts":"2026-07-09T04:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9"} {"level":"info","ts":"2026-07-09T04:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/18049312cd3281422dda1394e5520f86495afaeaac2c0bbe237c1cb3ed6a1dcb"} {"level":"info","ts":"2026-07-09T04:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/732724e4aa98bc2987ee7ffea76d18ed7c790c4c1d7e16188bbbbe384884648b"} {"level":"info","ts":"2026-07-09T04:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/238448ab50d57e4094ecbf8f64c554eb04b92bab5fc630bbd95a61bb0caf5fe5"} {"level":"info","ts":"2026-07-09T04:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c4dc9402eb62d671a5269af1e677f9ede6834f2840979e3ce2e518f88274035"} {"level":"info","ts":"2026-07-09T04:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bd72d769e3263a282ce6f15b1ca8c8023adaab7a9088c8b364e6e4eb93689301"} {"level":"info","ts":"2026-07-09T04:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3"} {"level":"info","ts":"2026-07-09T04:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0efe2b4768a44f8324e865b5777735eaabae17774e28c67ace4220c24847f863"} {"level":"info","ts":"2026-07-09T04:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1b0a2b074404259ae826e42e1a82fbd5924dea7b1e5afd0ab8b8081917880e9d"} {"level":"info","ts":"2026-07-09T04:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9d4164edcb14408157ee8d9a65ea3b72ab50d9e47d50b6e6c17f0c46bd35da9a"} {"level":"info","ts":"2026-07-09T04:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1fe83e46a42548dadaa01a65a3c789332e908f79dcb111a2cf03d5c474f64c7c"} {"level":"info","ts":"2026-07-09T04:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9556fbbf1482fea39f704afebd0f20f2492618ad4f2d293cad091454e6164eff"} {"level":"info","ts":"2026-07-09T04:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5be12b9fc485c506a85c1050d7b618faf8e73a8463fed9ef5f938fd8959b6a42"}