--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"info","ts":"2026-07-22T18:57:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47"} {"level":"info","ts":"2026-07-22T18:57:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f"} {"level":"info","ts":"2026-07-22T18:57:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e"} {"level":"info","ts":"2026-07-22T18:57:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345"} {"level":"info","ts":"2026-07-22T18:57:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/798e8b913d89fef2a7b007468de13a5fad1ff3c166110bebf4a428aa08c4ec79"} {"level":"info","ts":"2026-07-22T18:57:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/35f26a07046838c3504a1dba0c6ee4d3bccc06cd4a68c82280705afae35ae62d"} {"level":"info","ts":"2026-07-22T18:57:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d2bf233d88f54f5471d2eee9d97f27b70da96f3120a0f0411e1c35ae47704b5f"} {"level":"info","ts":"2026-07-22T18:57:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30"} {"level":"info","ts":"2026-07-22T18:57:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195"} {"level":"info","ts":"2026-07-22T18:57:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/31c7dd75e95aae787113a852e85290ec8dd00c6c22672a5f0b49919177cfdda9"} {"level":"info","ts":"2026-07-22T18:57:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5"} {"level":"info","ts":"2026-07-22T18:57:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dbe939fa61766f730c6e6d03b45c018945dd5f06c92a400d643cf088925ddb21"} {"level":"debug","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31c7dd75e95aae787113a852e85290ec8dd00c6c22672a5f0b49919177cfdda9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:57:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:57:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31c7dd75e95aae787113a852e85290ec8dd00c6c22672a5f0b49919177cfdda9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31c7dd75e95aae787113a852e85290ec8dd00c6c22672a5f0b49919177cfdda9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31c7dd75e95aae787113a852e85290ec8dd00c6c22672a5f0b49919177cfdda9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31c7dd75e95aae787113a852e85290ec8dd00c6c22672a5f0b49919177cfdda9"} {"level":"debug","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31c7dd75e95aae787113a852e85290ec8dd00c6c22672a5f0b49919177cfdda9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31c7dd75e95aae787113a852e85290ec8dd00c6c22672a5f0b49919177cfdda9"} {"level":"debug","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31c7dd75e95aae787113a852e85290ec8dd00c6c22672a5f0b49919177cfdda9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:57:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:57:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31c7dd75e95aae787113a852e85290ec8dd00c6c22672a5f0b49919177cfdda9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31c7dd75e95aae787113a852e85290ec8dd00c6c22672a5f0b49919177cfdda9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31c7dd75e95aae787113a852e85290ec8dd00c6c22672a5f0b49919177cfdda9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:57:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:57:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31c7dd75e95aae787113a852e85290ec8dd00c6c22672a5f0b49919177cfdda9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:57:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:57:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31c7dd75e95aae787113a852e85290ec8dd00c6c22672a5f0b49919177cfdda9"} {"level":"info","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31c7dd75e95aae787113a852e85290ec8dd00c6c22672a5f0b49919177cfdda9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:57:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:57:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31c7dd75e95aae787113a852e85290ec8dd00c6c22672a5f0b49919177cfdda9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47"} {"level":"info","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31c7dd75e95aae787113a852e85290ec8dd00c6c22672a5f0b49919177cfdda9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:57:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:57:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31c7dd75e95aae787113a852e85290ec8dd00c6c22672a5f0b49919177cfdda9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:57:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:57:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31c7dd75e95aae787113a852e85290ec8dd00c6c22672a5f0b49919177cfdda9"} {"level":"info","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31c7dd75e95aae787113a852e85290ec8dd00c6c22672a5f0b49919177cfdda9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:57:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:57:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31c7dd75e95aae787113a852e85290ec8dd00c6c22672a5f0b49919177cfdda9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:57:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:57:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31c7dd75e95aae787113a852e85290ec8dd00c6c22672a5f0b49919177cfdda9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47"} {"level":"info","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31c7dd75e95aae787113a852e85290ec8dd00c6c22672a5f0b49919177cfdda9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:57:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:57:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31c7dd75e95aae787113a852e85290ec8dd00c6c22672a5f0b49919177cfdda9"} {"level":"info","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31c7dd75e95aae787113a852e85290ec8dd00c6c22672a5f0b49919177cfdda9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:57:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:57:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47"} {"level":"debug","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:57:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:57:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31c7dd75e95aae787113a852e85290ec8dd00c6c22672a5f0b49919177cfdda9"} {"level":"info","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47"} {"level":"debug","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:57:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:57:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30"} {"level":"debug","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30"} {"level":"debug","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:57:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:57:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:57:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:57:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30"} {"level":"info","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:57:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:57:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:57:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:57:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f"} {"level":"error","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f"} {"level":"debug","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:57:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:57:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5"} {"level":"debug","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:57:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:57:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5"} {"level":"info","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f"} {"level":"debug","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:57:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:57:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:57:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:57:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"798e8b913d89fef2a7b007468de13a5fad1ff3c166110bebf4a428aa08c4ec79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:57:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:57:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5"} {"level":"info","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"798e8b913d89fef2a7b007468de13a5fad1ff3c166110bebf4a428aa08c4ec79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:57:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:57:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/798e8b913d89fef2a7b007468de13a5fad1ff3c166110bebf4a428aa08c4ec79"} {"level":"info","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"798e8b913d89fef2a7b007468de13a5fad1ff3c166110bebf4a428aa08c4ec79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:57:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:57:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["798e8b913d89fef2a7b007468de13a5fad1ff3c166110bebf4a428aa08c4ec79"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5"} {"level":"info","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"798e8b913d89fef2a7b007468de13a5fad1ff3c166110bebf4a428aa08c4ec79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"798e8b913d89fef2a7b007468de13a5fad1ff3c166110bebf4a428aa08c4ec79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:57:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:57:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"798e8b913d89fef2a7b007468de13a5fad1ff3c166110bebf4a428aa08c4ec79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"798e8b913d89fef2a7b007468de13a5fad1ff3c166110bebf4a428aa08c4ec79","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/798e8b913d89fef2a7b007468de13a5fad1ff3c166110bebf4a428aa08c4ec79"} {"level":"debug","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"798e8b913d89fef2a7b007468de13a5fad1ff3c166110bebf4a428aa08c4ec79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:57:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:57:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["798e8b913d89fef2a7b007468de13a5fad1ff3c166110bebf4a428aa08c4ec79"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5"} {"level":"info","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"798e8b913d89fef2a7b007468de13a5fad1ff3c166110bebf4a428aa08c4ec79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"798e8b913d89fef2a7b007468de13a5fad1ff3c166110bebf4a428aa08c4ec79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:57:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:57:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/798e8b913d89fef2a7b007468de13a5fad1ff3c166110bebf4a428aa08c4ec79"} {"level":"info","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"798e8b913d89fef2a7b007468de13a5fad1ff3c166110bebf4a428aa08c4ec79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"798e8b913d89fef2a7b007468de13a5fad1ff3c166110bebf4a428aa08c4ec79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"798e8b913d89fef2a7b007468de13a5fad1ff3c166110bebf4a428aa08c4ec79","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/798e8b913d89fef2a7b007468de13a5fad1ff3c166110bebf4a428aa08c4ec79"} {"level":"debug","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"798e8b913d89fef2a7b007468de13a5fad1ff3c166110bebf4a428aa08c4ec79","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/798e8b913d89fef2a7b007468de13a5fad1ff3c166110bebf4a428aa08c4ec79"} {"level":"debug","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"798e8b913d89fef2a7b007468de13a5fad1ff3c166110bebf4a428aa08c4ec79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:57:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:57:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["798e8b913d89fef2a7b007468de13a5fad1ff3c166110bebf4a428aa08c4ec79"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"798e8b913d89fef2a7b007468de13a5fad1ff3c166110bebf4a428aa08c4ec79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"798e8b913d89fef2a7b007468de13a5fad1ff3c166110bebf4a428aa08c4ec79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:57:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:57:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/798e8b913d89fef2a7b007468de13a5fad1ff3c166110bebf4a428aa08c4ec79"} {"level":"info","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345"} {"level":"debug","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:57:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:57:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345"} {"level":"debug","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:57:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:57:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195"} {"level":"debug","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195"} {"level":"debug","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:57:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:57:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:57:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:57:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195"} {"level":"debug","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195"} {"level":"debug","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:57:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:57:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:57:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:57:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2bf233d88f54f5471d2eee9d97f27b70da96f3120a0f0411e1c35ae47704b5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:57:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:57:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195"} {"level":"info","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2bf233d88f54f5471d2eee9d97f27b70da96f3120a0f0411e1c35ae47704b5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:57:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:57:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2bf233d88f54f5471d2eee9d97f27b70da96f3120a0f0411e1c35ae47704b5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:57:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:57:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2bf233d88f54f5471d2eee9d97f27b70da96f3120a0f0411e1c35ae47704b5f"} {"level":"info","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2bf233d88f54f5471d2eee9d97f27b70da96f3120a0f0411e1c35ae47704b5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:57:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:57:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2bf233d88f54f5471d2eee9d97f27b70da96f3120a0f0411e1c35ae47704b5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:57:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:57:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2bf233d88f54f5471d2eee9d97f27b70da96f3120a0f0411e1c35ae47704b5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195"} {"level":"info","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2bf233d88f54f5471d2eee9d97f27b70da96f3120a0f0411e1c35ae47704b5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:57:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:57:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2bf233d88f54f5471d2eee9d97f27b70da96f3120a0f0411e1c35ae47704b5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:57:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:57:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2bf233d88f54f5471d2eee9d97f27b70da96f3120a0f0411e1c35ae47704b5f"} {"level":"info","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2bf233d88f54f5471d2eee9d97f27b70da96f3120a0f0411e1c35ae47704b5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:57:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:57:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2bf233d88f54f5471d2eee9d97f27b70da96f3120a0f0411e1c35ae47704b5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:57:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:57:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2bf233d88f54f5471d2eee9d97f27b70da96f3120a0f0411e1c35ae47704b5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2bf233d88f54f5471d2eee9d97f27b70da96f3120a0f0411e1c35ae47704b5f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195"} {"level":"debug","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:57:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:57:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:57:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:57:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2bf233d88f54f5471d2eee9d97f27b70da96f3120a0f0411e1c35ae47704b5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:57:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:57:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2bf233d88f54f5471d2eee9d97f27b70da96f3120a0f0411e1c35ae47704b5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2bf233d88f54f5471d2eee9d97f27b70da96f3120a0f0411e1c35ae47704b5f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2bf233d88f54f5471d2eee9d97f27b70da96f3120a0f0411e1c35ae47704b5f"} {"level":"debug","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2bf233d88f54f5471d2eee9d97f27b70da96f3120a0f0411e1c35ae47704b5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:57:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:57:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2bf233d88f54f5471d2eee9d97f27b70da96f3120a0f0411e1c35ae47704b5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2bf233d88f54f5471d2eee9d97f27b70da96f3120a0f0411e1c35ae47704b5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:57:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:57:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2bf233d88f54f5471d2eee9d97f27b70da96f3120a0f0411e1c35ae47704b5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35f26a07046838c3504a1dba0c6ee4d3bccc06cd4a68c82280705afae35ae62d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:57:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:57:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e"} {"level":"info","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35f26a07046838c3504a1dba0c6ee4d3bccc06cd4a68c82280705afae35ae62d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35f26a07046838c3504a1dba0c6ee4d3bccc06cd4a68c82280705afae35ae62d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:57:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:57:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35f26a07046838c3504a1dba0c6ee4d3bccc06cd4a68c82280705afae35ae62d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195"} {"level":"debug","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35f26a07046838c3504a1dba0c6ee4d3bccc06cd4a68c82280705afae35ae62d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2bf233d88f54f5471d2eee9d97f27b70da96f3120a0f0411e1c35ae47704b5f"} {"level":"info","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35f26a07046838c3504a1dba0c6ee4d3bccc06cd4a68c82280705afae35ae62d"} {"level":"debug","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35f26a07046838c3504a1dba0c6ee4d3bccc06cd4a68c82280705afae35ae62d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:57:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:57:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35f26a07046838c3504a1dba0c6ee4d3bccc06cd4a68c82280705afae35ae62d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e"} {"level":"info","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35f26a07046838c3504a1dba0c6ee4d3bccc06cd4a68c82280705afae35ae62d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbe939fa61766f730c6e6d03b45c018945dd5f06c92a400d643cf088925ddb21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:57:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:57:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbe939fa61766f730c6e6d03b45c018945dd5f06c92a400d643cf088925ddb21","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35f26a07046838c3504a1dba0c6ee4d3bccc06cd4a68c82280705afae35ae62d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbe939fa61766f730c6e6d03b45c018945dd5f06c92a400d643cf088925ddb21","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbe939fa61766f730c6e6d03b45c018945dd5f06c92a400d643cf088925ddb21"} {"level":"debug","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbe939fa61766f730c6e6d03b45c018945dd5f06c92a400d643cf088925ddb21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:57:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:57:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dbe939fa61766f730c6e6d03b45c018945dd5f06c92a400d643cf088925ddb21"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbe939fa61766f730c6e6d03b45c018945dd5f06c92a400d643cf088925ddb21","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbe939fa61766f730c6e6d03b45c018945dd5f06c92a400d643cf088925ddb21","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35f26a07046838c3504a1dba0c6ee4d3bccc06cd4a68c82280705afae35ae62d"} {"level":"info","ts":"2026-07-22T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbe939fa61766f730c6e6d03b45c018945dd5f06c92a400d643cf088925ddb21"} {"level":"info","ts":"2026-07-22T18:57:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc21ba31-a1da-476e-b5bd-f8ab17c127b7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:57080","PortSpecifier":{"PortValue":57080}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cc21ba31-a1da-476e-b5bd-f8ab17c127b7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T18:57:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc21ba31-a1da-476e-b5bd-f8ab17c127b7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:57080","PortSpecifier":{"PortValue":57080}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784746670,"nanos":333042779},"http":{"id":"cc21ba31-a1da-476e-b5bd-f8ab17c127b7","method":"POST","headers":{":authority":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T18:57:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cc21ba31-a1da-476e-b5bd-f8ab17c127b7","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T18:57:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cc21ba31-a1da-476e-b5bd-f8ab17c127b7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8ab0d4f6-f8f1-4cf4-9efe-fca7c4ab5850","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a401cdc-ebb5-4d31-80cd-b4a9f6027e30"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa1ce497e2e7"]}} {"level":"debug","ts":"2026-07-22T18:57:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cc21ba31-a1da-476e-b5bd-f8ab17c127b7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa1ce497e2e7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a401cdc-ebb5-4d31-80cd-b4a9f6027e30"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8ab0d4f6-f8f1-4cf4-9efe-fca7c4ab5850","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"34698b12faef1290bddb911dad7b917557e4788005c9d7d2fd0169cd983e8312"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T18:57:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc21ba31-a1da-476e-b5bd-f8ab17c127b7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T18:57:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc21ba31-a1da-476e-b5bd-f8ab17c127b7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T18:57:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc21ba31-a1da-476e-b5bd-f8ab17c127b7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d24283/auth-test-model-d24283\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d24283/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T18:57:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cc21ba31-a1da-476e-b5bd-f8ab17c127b7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T18:57:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc21ba31-a1da-476e-b5bd-f8ab17c127b7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T18:57:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc21ba31-a1da-476e-b5bd-f8ab17c127b7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-22T18:57:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc21ba31-a1da-476e-b5bd-f8ab17c127b7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T18:57:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc21ba31-a1da-476e-b5bd-f8ab17c127b7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T18:57:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"61db8523-0d6f-4021-8fd6-a95a4a621b45","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:37162","PortSpecifier":{"PortValue":37162}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"61db8523-0d6f-4021-8fd6-a95a4a621b45","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-63c82d.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T18:57:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"61db8523-0d6f-4021-8fd6-a95a4a621b45","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:37162","PortSpecifier":{"PortValue":37162}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784746670,"nanos":370035637},"http":{"id":"61db8523-0d6f-4021-8fd6-a95a4a621b45","method":"POST","headers":{":authority":"e2e-shared-b-63c82d.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T18:57:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"61db8523-0d6f-4021-8fd6-a95a4a621b45","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T18:57:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"61db8523-0d6f-4021-8fd6-a95a4a621b45","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8ab0d4f6-f8f1-4cf4-9efe-fca7c4ab5850","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a401cdc-ebb5-4d31-80cd-b4a9f6027e30"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa1ce497e2e7"]}} {"level":"debug","ts":"2026-07-22T18:57:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"61db8523-0d6f-4021-8fd6-a95a4a621b45","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa1ce497e2e7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a401cdc-ebb5-4d31-80cd-b4a9f6027e30"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8ab0d4f6-f8f1-4cf4-9efe-fca7c4ab5850","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-63c82d.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T18:57:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"61db8523-0d6f-4021-8fd6-a95a4a621b45","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T18:57:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"61db8523-0d6f-4021-8fd6-a95a4a621b45","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T18:57:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"61db8523-0d6f-4021-8fd6-a95a4a621b45","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-63c82d/auth-test-model-63c82d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-63c82d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T18:57:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"61db8523-0d6f-4021-8fd6-a95a4a621b45","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T18:57:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"61db8523-0d6f-4021-8fd6-a95a4a621b45","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T18:57:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"61db8523-0d6f-4021-8fd6-a95a4a621b45","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T18:57:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"61db8523-0d6f-4021-8fd6-a95a4a621b45","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T18:57:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"61db8523-0d6f-4021-8fd6-a95a4a621b45","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T18:57:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2a02b1a9-945c-4c9a-8afe-d90f8bbe1323","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:37166","PortSpecifier":{"PortValue":37166}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2a02b1a9-945c-4c9a-8afe-d90f8bbe1323","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-63c82d.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T18:57:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2a02b1a9-945c-4c9a-8afe-d90f8bbe1323","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:37166","PortSpecifier":{"PortValue":37166}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784746670,"nanos":412491074},"http":{"id":"2a02b1a9-945c-4c9a-8afe-d90f8bbe1323","method":"GET","headers":{":authority":"e2e-shared-b-63c82d.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T18:57:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2a02b1a9-945c-4c9a-8afe-d90f8bbe1323","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-yQnGfEuAjvSePYZ3_MbmVOFVdM91VJ4HgeW2fAgbHryyux2cOk6vSd0bDxE9"} {"level":"debug","ts":"2026-07-22T18:57:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2a02b1a9-945c-4c9a-8afe-d90f8bbe1323","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-63c82d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-yQnGfEuAjvSePYZ3_MbmVOFVdM91VJ4HgeW2fAgbHryyux2cOk6vSd0bDxE9\"}"} {"level":"debug","ts":"2026-07-22T18:57:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2a02b1a9-945c-4c9a-8afe-d90f8bbe1323","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-63c82d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-22T18:57:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2a02b1a9-945c-4c9a-8afe-d90f8bbe1323","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-63c82d.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T18:57:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"2a02b1a9-945c-4c9a-8afe-d90f8bbe1323","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-22T18:57:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2a02b1a9-945c-4c9a-8afe-d90f8bbe1323","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-22T18:57:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2a02b1a9-945c-4c9a-8afe-d90f8bbe1323","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"x-ext-auth-reason":""},{"content-type":"text/plain"}]}} {"level":"info","ts":"2026-07-22T18:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f"} {"level":"info","ts":"2026-07-22T18:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/31c7dd75e95aae787113a852e85290ec8dd00c6c22672a5f0b49919177cfdda9"} {"level":"info","ts":"2026-07-22T18:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195"} {"level":"info","ts":"2026-07-22T18:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/35f26a07046838c3504a1dba0c6ee4d3bccc06cd4a68c82280705afae35ae62d"} {"level":"info","ts":"2026-07-22T18:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dbe939fa61766f730c6e6d03b45c018945dd5f06c92a400d643cf088925ddb21"} {"level":"info","ts":"2026-07-22T18:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e"} {"level":"info","ts":"2026-07-22T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30"} {"level":"info","ts":"2026-07-22T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5"} {"level":"info","ts":"2026-07-22T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d2bf233d88f54f5471d2eee9d97f27b70da96f3120a0f0411e1c35ae47704b5f"} {"level":"info","ts":"2026-07-22T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345"} {"level":"info","ts":"2026-07-22T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47"} {"level":"info","ts":"2026-07-22T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/798e8b913d89fef2a7b007468de13a5fad1ff3c166110bebf4a428aa08c4ec79"} {"level":"debug","ts":"2026-07-22T18:58:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:58:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5"} {"level":"debug","ts":"2026-07-22T18:58:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:58:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5"} {"level":"debug","ts":"2026-07-22T18:58:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:58:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:58:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:58:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5"} {"level":"debug","ts":"2026-07-22T18:58:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:58:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5"} {"level":"debug","ts":"2026-07-22T18:58:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:58:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:58:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:58:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5"} {"level":"debug","ts":"2026-07-22T18:58:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:58:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e"} {"level":"debug","ts":"2026-07-22T18:58:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:58:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e"} {"level":"debug","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e"} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345"} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e"} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345"} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e"} {"level":"error","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345"} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30"} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195"} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345"} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30"} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e"} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"798e8b913d89fef2a7b007468de13a5fad1ff3c166110bebf4a428aa08c4ec79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195"} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"798e8b913d89fef2a7b007468de13a5fad1ff3c166110bebf4a428aa08c4ec79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/798e8b913d89fef2a7b007468de13a5fad1ff3c166110bebf4a428aa08c4ec79"} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"798e8b913d89fef2a7b007468de13a5fad1ff3c166110bebf4a428aa08c4ec79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["798e8b913d89fef2a7b007468de13a5fad1ff3c166110bebf4a428aa08c4ec79"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30"} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"798e8b913d89fef2a7b007468de13a5fad1ff3c166110bebf4a428aa08c4ec79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"798e8b913d89fef2a7b007468de13a5fad1ff3c166110bebf4a428aa08c4ec79","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345"} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195"} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/798e8b913d89fef2a7b007468de13a5fad1ff3c166110bebf4a428aa08c4ec79"} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30"} {"level":"debug","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31c7dd75e95aae787113a852e85290ec8dd00c6c22672a5f0b49919177cfdda9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31c7dd75e95aae787113a852e85290ec8dd00c6c22672a5f0b49919177cfdda9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31c7dd75e95aae787113a852e85290ec8dd00c6c22672a5f0b49919177cfdda9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31c7dd75e95aae787113a852e85290ec8dd00c6c22672a5f0b49919177cfdda9"} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31c7dd75e95aae787113a852e85290ec8dd00c6c22672a5f0b49919177cfdda9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47"} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31c7dd75e95aae787113a852e85290ec8dd00c6c22672a5f0b49919177cfdda9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31c7dd75e95aae787113a852e85290ec8dd00c6c22672a5f0b49919177cfdda9"} {"level":"error","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31c7dd75e95aae787113a852e85290ec8dd00c6c22672a5f0b49919177cfdda9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31c7dd75e95aae787113a852e85290ec8dd00c6c22672a5f0b49919177cfdda9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31c7dd75e95aae787113a852e85290ec8dd00c6c22672a5f0b49919177cfdda9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47"} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31c7dd75e95aae787113a852e85290ec8dd00c6c22672a5f0b49919177cfdda9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31c7dd75e95aae787113a852e85290ec8dd00c6c22672a5f0b49919177cfdda9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31c7dd75e95aae787113a852e85290ec8dd00c6c22672a5f0b49919177cfdda9"} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31c7dd75e95aae787113a852e85290ec8dd00c6c22672a5f0b49919177cfdda9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31c7dd75e95aae787113a852e85290ec8dd00c6c22672a5f0b49919177cfdda9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47"} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31c7dd75e95aae787113a852e85290ec8dd00c6c22672a5f0b49919177cfdda9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31c7dd75e95aae787113a852e85290ec8dd00c6c22672a5f0b49919177cfdda9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31c7dd75e95aae787113a852e85290ec8dd00c6c22672a5f0b49919177cfdda9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31c7dd75e95aae787113a852e85290ec8dd00c6c22672a5f0b49919177cfdda9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31c7dd75e95aae787113a852e85290ec8dd00c6c22672a5f0b49919177cfdda9"} {"level":"debug","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31c7dd75e95aae787113a852e85290ec8dd00c6c22672a5f0b49919177cfdda9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31c7dd75e95aae787113a852e85290ec8dd00c6c22672a5f0b49919177cfdda9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31c7dd75e95aae787113a852e85290ec8dd00c6c22672a5f0b49919177cfdda9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31c7dd75e95aae787113a852e85290ec8dd00c6c22672a5f0b49919177cfdda9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47"} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31c7dd75e95aae787113a852e85290ec8dd00c6c22672a5f0b49919177cfdda9"} {"level":"debug","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35f26a07046838c3504a1dba0c6ee4d3bccc06cd4a68c82280705afae35ae62d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35f26a07046838c3504a1dba0c6ee4d3bccc06cd4a68c82280705afae35ae62d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35f26a07046838c3504a1dba0c6ee4d3bccc06cd4a68c82280705afae35ae62d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35f26a07046838c3504a1dba0c6ee4d3bccc06cd4a68c82280705afae35ae62d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35f26a07046838c3504a1dba0c6ee4d3bccc06cd4a68c82280705afae35ae62d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35f26a07046838c3504a1dba0c6ee4d3bccc06cd4a68c82280705afae35ae62d"} {"level":"error","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"35f26a07046838c3504a1dba0c6ee4d3bccc06cd4a68c82280705afae35ae62d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"35f26a07046838c3504a1dba0c6ee4d3bccc06cd4a68c82280705afae35ae62d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35f26a07046838c3504a1dba0c6ee4d3bccc06cd4a68c82280705afae35ae62d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35f26a07046838c3504a1dba0c6ee4d3bccc06cd4a68c82280705afae35ae62d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35f26a07046838c3504a1dba0c6ee4d3bccc06cd4a68c82280705afae35ae62d"} {"level":"debug","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f"} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbe939fa61766f730c6e6d03b45c018945dd5f06c92a400d643cf088925ddb21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbe939fa61766f730c6e6d03b45c018945dd5f06c92a400d643cf088925ddb21","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35f26a07046838c3504a1dba0c6ee4d3bccc06cd4a68c82280705afae35ae62d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35f26a07046838c3504a1dba0c6ee4d3bccc06cd4a68c82280705afae35ae62d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbe939fa61766f730c6e6d03b45c018945dd5f06c92a400d643cf088925ddb21"} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35f26a07046838c3504a1dba0c6ee4d3bccc06cd4a68c82280705afae35ae62d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbe939fa61766f730c6e6d03b45c018945dd5f06c92a400d643cf088925ddb21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dbe939fa61766f730c6e6d03b45c018945dd5f06c92a400d643cf088925ddb21"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f"} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbe939fa61766f730c6e6d03b45c018945dd5f06c92a400d643cf088925ddb21","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35f26a07046838c3504a1dba0c6ee4d3bccc06cd4a68c82280705afae35ae62d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbe939fa61766f730c6e6d03b45c018945dd5f06c92a400d643cf088925ddb21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbe939fa61766f730c6e6d03b45c018945dd5f06c92a400d643cf088925ddb21","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbe939fa61766f730c6e6d03b45c018945dd5f06c92a400d643cf088925ddb21"} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbe939fa61766f730c6e6d03b45c018945dd5f06c92a400d643cf088925ddb21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dbe939fa61766f730c6e6d03b45c018945dd5f06c92a400d643cf088925ddb21"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbe939fa61766f730c6e6d03b45c018945dd5f06c92a400d643cf088925ddb21","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2bf233d88f54f5471d2eee9d97f27b70da96f3120a0f0411e1c35ae47704b5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35f26a07046838c3504a1dba0c6ee4d3bccc06cd4a68c82280705afae35ae62d"} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2bf233d88f54f5471d2eee9d97f27b70da96f3120a0f0411e1c35ae47704b5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbe939fa61766f730c6e6d03b45c018945dd5f06c92a400d643cf088925ddb21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbe939fa61766f730c6e6d03b45c018945dd5f06c92a400d643cf088925ddb21"} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbe939fa61766f730c6e6d03b45c018945dd5f06c92a400d643cf088925ddb21","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2bf233d88f54f5471d2eee9d97f27b70da96f3120a0f0411e1c35ae47704b5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2bf233d88f54f5471d2eee9d97f27b70da96f3120a0f0411e1c35ae47704b5f"} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f"} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2bf233d88f54f5471d2eee9d97f27b70da96f3120a0f0411e1c35ae47704b5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbe939fa61766f730c6e6d03b45c018945dd5f06c92a400d643cf088925ddb21","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2bf233d88f54f5471d2eee9d97f27b70da96f3120a0f0411e1c35ae47704b5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2bf233d88f54f5471d2eee9d97f27b70da96f3120a0f0411e1c35ae47704b5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbe939fa61766f730c6e6d03b45c018945dd5f06c92a400d643cf088925ddb21"} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2bf233d88f54f5471d2eee9d97f27b70da96f3120a0f0411e1c35ae47704b5f"} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2bf233d88f54f5471d2eee9d97f27b70da96f3120a0f0411e1c35ae47704b5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbe939fa61766f730c6e6d03b45c018945dd5f06c92a400d643cf088925ddb21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:58:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dbe939fa61766f730c6e6d03b45c018945dd5f06c92a400d643cf088925ddb21"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2bf233d88f54f5471d2eee9d97f27b70da96f3120a0f0411e1c35ae47704b5f"} {"level":"info","ts":"2026-07-22T18:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbe939fa61766f730c6e6d03b45c018945dd5f06c92a400d643cf088925ddb21","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2bf233d88f54f5471d2eee9d97f27b70da96f3120a0f0411e1c35ae47704b5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbe939fa61766f730c6e6d03b45c018945dd5f06c92a400d643cf088925ddb21","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbe939fa61766f730c6e6d03b45c018945dd5f06c92a400d643cf088925ddb21"} {"level":"info","ts":"2026-07-22T18:58:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1a2a455f-7128-4990-939c-46c38825a6ff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:45174","PortSpecifier":{"PortValue":45174}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1a2a455f-7128-4990-939c-46c38825a6ff","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T18:58:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1a2a455f-7128-4990-939c-46c38825a6ff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:45174","PortSpecifier":{"PortValue":45174}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784746689,"nanos":854439449},"http":{"id":"1a2a455f-7128-4990-939c-46c38825a6ff","method":"POST","headers":{":authority":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T18:58:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1a2a455f-7128-4990-939c-46c38825a6ff","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T18:58:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1a2a455f-7128-4990-939c-46c38825a6ff","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8ab0d4f6-f8f1-4cf4-9efe-fca7c4ab5850","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a401cdc-ebb5-4d31-80cd-b4a9f6027e30"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa1ce497e2e7"]}} {"level":"debug","ts":"2026-07-22T18:58:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1a2a455f-7128-4990-939c-46c38825a6ff","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa1ce497e2e7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a401cdc-ebb5-4d31-80cd-b4a9f6027e30"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8ab0d4f6-f8f1-4cf4-9efe-fca7c4ab5850","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"34698b12faef1290bddb911dad7b917557e4788005c9d7d2fd0169cd983e8312"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T18:58:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a2a455f-7128-4990-939c-46c38825a6ff","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T18:58:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a2a455f-7128-4990-939c-46c38825a6ff","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T18:58:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a2a455f-7128-4990-939c-46c38825a6ff","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d24283/auth-test-model-d24283\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d24283/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T18:58:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1a2a455f-7128-4990-939c-46c38825a6ff","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T18:58:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a2a455f-7128-4990-939c-46c38825a6ff","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T18:58:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a2a455f-7128-4990-939c-46c38825a6ff","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T18:58:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1a2a455f-7128-4990-939c-46c38825a6ff","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T18:58:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1a2a455f-7128-4990-939c-46c38825a6ff","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T18:58:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4255c270-7a53-4b4c-b5da-77044226d877","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:48588","PortSpecifier":{"PortValue":48588}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4255c270-7a53-4b4c-b5da-77044226d877","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-63c82d.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T18:58:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4255c270-7a53-4b4c-b5da-77044226d877","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:48588","PortSpecifier":{"PortValue":48588}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784746689,"nanos":892198490},"http":{"id":"4255c270-7a53-4b4c-b5da-77044226d877","method":"POST","headers":{":authority":"e2e-shared-b-63c82d.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T18:58:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4255c270-7a53-4b4c-b5da-77044226d877","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T18:58:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4255c270-7a53-4b4c-b5da-77044226d877","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8ab0d4f6-f8f1-4cf4-9efe-fca7c4ab5850","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a401cdc-ebb5-4d31-80cd-b4a9f6027e30"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa1ce497e2e7"]}} {"level":"debug","ts":"2026-07-22T18:58:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4255c270-7a53-4b4c-b5da-77044226d877","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa1ce497e2e7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a401cdc-ebb5-4d31-80cd-b4a9f6027e30"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8ab0d4f6-f8f1-4cf4-9efe-fca7c4ab5850","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-63c82d.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T18:58:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4255c270-7a53-4b4c-b5da-77044226d877","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T18:58:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4255c270-7a53-4b4c-b5da-77044226d877","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T18:58:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4255c270-7a53-4b4c-b5da-77044226d877","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-63c82d/auth-test-model-63c82d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-63c82d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T18:58:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4255c270-7a53-4b4c-b5da-77044226d877","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T18:58:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4255c270-7a53-4b4c-b5da-77044226d877","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T18:58:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4255c270-7a53-4b4c-b5da-77044226d877","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T18:58:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4255c270-7a53-4b4c-b5da-77044226d877","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T18:58:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4255c270-7a53-4b4c-b5da-77044226d877","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T18:58:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"89fcde9e-f337-4787-8362-fe122e4b4105","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:45186","PortSpecifier":{"PortValue":45186}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"89fcde9e-f337-4787-8362-fe122e4b4105","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T18:58:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"89fcde9e-f337-4787-8362-fe122e4b4105","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:45186","PortSpecifier":{"PortValue":45186}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784746689,"nanos":930259237},"http":{"id":"89fcde9e-f337-4787-8362-fe122e4b4105","method":"POST","headers":{":authority":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T18:58:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"89fcde9e-f337-4787-8362-fe122e4b4105","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T18:58:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"89fcde9e-f337-4787-8362-fe122e4b4105","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8ab0d4f6-f8f1-4cf4-9efe-fca7c4ab5850","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a401cdc-ebb5-4d31-80cd-b4a9f6027e30"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa1ce497e2e7"]}} {"level":"debug","ts":"2026-07-22T18:58:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"89fcde9e-f337-4787-8362-fe122e4b4105","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa1ce497e2e7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a401cdc-ebb5-4d31-80cd-b4a9f6027e30"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8ab0d4f6-f8f1-4cf4-9efe-fca7c4ab5850","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"34698b12faef1290bddb911dad7b917557e4788005c9d7d2fd0169cd983e8312"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T18:58:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89fcde9e-f337-4787-8362-fe122e4b4105","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T18:58:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89fcde9e-f337-4787-8362-fe122e4b4105","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T18:58:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89fcde9e-f337-4787-8362-fe122e4b4105","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d24283/auth-test-model-d24283\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d24283/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T18:58:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"89fcde9e-f337-4787-8362-fe122e4b4105","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T18:58:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"89fcde9e-f337-4787-8362-fe122e4b4105","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T18:58:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"89fcde9e-f337-4787-8362-fe122e4b4105","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-22T18:58:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"89fcde9e-f337-4787-8362-fe122e4b4105","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T18:58:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"89fcde9e-f337-4787-8362-fe122e4b4105","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T18:58:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"caca9676-1025-48bd-bc39-2607326c5e11","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:48602","PortSpecifier":{"PortValue":48602}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"caca9676-1025-48bd-bc39-2607326c5e11","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-63c82d.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T18:58:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"caca9676-1025-48bd-bc39-2607326c5e11","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:48602","PortSpecifier":{"PortValue":48602}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784746689,"nanos":968402405},"http":{"id":"caca9676-1025-48bd-bc39-2607326c5e11","method":"POST","headers":{":authority":"e2e-shared-b-63c82d.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T18:58:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"caca9676-1025-48bd-bc39-2607326c5e11","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T18:58:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"caca9676-1025-48bd-bc39-2607326c5e11","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8ab0d4f6-f8f1-4cf4-9efe-fca7c4ab5850","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a401cdc-ebb5-4d31-80cd-b4a9f6027e30"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa1ce497e2e7"]}} {"level":"debug","ts":"2026-07-22T18:58:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"caca9676-1025-48bd-bc39-2607326c5e11","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa1ce497e2e7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a401cdc-ebb5-4d31-80cd-b4a9f6027e30"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8ab0d4f6-f8f1-4cf4-9efe-fca7c4ab5850","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-63c82d.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T18:58:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"caca9676-1025-48bd-bc39-2607326c5e11","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T18:58:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"caca9676-1025-48bd-bc39-2607326c5e11","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T18:58:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"caca9676-1025-48bd-bc39-2607326c5e11","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-63c82d/auth-test-model-63c82d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-63c82d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T18:58:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"caca9676-1025-48bd-bc39-2607326c5e11","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T18:58:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"caca9676-1025-48bd-bc39-2607326c5e11","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T18:58:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"caca9676-1025-48bd-bc39-2607326c5e11","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T18:58:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"caca9676-1025-48bd-bc39-2607326c5e11","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T18:58:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"caca9676-1025-48bd-bc39-2607326c5e11","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T18:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195"} {"level":"info","ts":"2026-07-22T18:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d2bf233d88f54f5471d2eee9d97f27b70da96f3120a0f0411e1c35ae47704b5f"} {"level":"info","ts":"2026-07-22T18:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/31c7dd75e95aae787113a852e85290ec8dd00c6c22672a5f0b49919177cfdda9"} {"level":"info","ts":"2026-07-22T18:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47"} {"level":"info","ts":"2026-07-22T18:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/798e8b913d89fef2a7b007468de13a5fad1ff3c166110bebf4a428aa08c4ec79"} {"level":"info","ts":"2026-07-22T18:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5"} {"level":"info","ts":"2026-07-22T18:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dbe939fa61766f730c6e6d03b45c018945dd5f06c92a400d643cf088925ddb21"} {"level":"info","ts":"2026-07-22T18:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f"} {"level":"info","ts":"2026-07-22T18:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/35f26a07046838c3504a1dba0c6ee4d3bccc06cd4a68c82280705afae35ae62d"} {"level":"info","ts":"2026-07-22T18:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30"} {"level":"info","ts":"2026-07-22T18:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345"} {"level":"info","ts":"2026-07-22T18:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e"} {"level":"debug","ts":"2026-07-22T18:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35f26a07046838c3504a1dba0c6ee4d3bccc06cd4a68c82280705afae35ae62d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35f26a07046838c3504a1dba0c6ee4d3bccc06cd4a68c82280705afae35ae62d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35f26a07046838c3504a1dba0c6ee4d3bccc06cd4a68c82280705afae35ae62d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35f26a07046838c3504a1dba0c6ee4d3bccc06cd4a68c82280705afae35ae62d"} {"level":"debug","ts":"2026-07-22T18:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35f26a07046838c3504a1dba0c6ee4d3bccc06cd4a68c82280705afae35ae62d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35f26a07046838c3504a1dba0c6ee4d3bccc06cd4a68c82280705afae35ae62d"} {"level":"debug","ts":"2026-07-22T18:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35f26a07046838c3504a1dba0c6ee4d3bccc06cd4a68c82280705afae35ae62d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:58:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:58:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35f26a07046838c3504a1dba0c6ee4d3bccc06cd4a68c82280705afae35ae62d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35f26a07046838c3504a1dba0c6ee4d3bccc06cd4a68c82280705afae35ae62d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35f26a07046838c3504a1dba0c6ee4d3bccc06cd4a68c82280705afae35ae62d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35f26a07046838c3504a1dba0c6ee4d3bccc06cd4a68c82280705afae35ae62d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35f26a07046838c3504a1dba0c6ee4d3bccc06cd4a68c82280705afae35ae62d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35f26a07046838c3504a1dba0c6ee4d3bccc06cd4a68c82280705afae35ae62d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35f26a07046838c3504a1dba0c6ee4d3bccc06cd4a68c82280705afae35ae62d"} {"level":"debug","ts":"2026-07-22T18:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35f26a07046838c3504a1dba0c6ee4d3bccc06cd4a68c82280705afae35ae62d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35f26a07046838c3504a1dba0c6ee4d3bccc06cd4a68c82280705afae35ae62d"} {"level":"debug","ts":"2026-07-22T18:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbe939fa61766f730c6e6d03b45c018945dd5f06c92a400d643cf088925ddb21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbe939fa61766f730c6e6d03b45c018945dd5f06c92a400d643cf088925ddb21","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbe939fa61766f730c6e6d03b45c018945dd5f06c92a400d643cf088925ddb21","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbe939fa61766f730c6e6d03b45c018945dd5f06c92a400d643cf088925ddb21","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbe939fa61766f730c6e6d03b45c018945dd5f06c92a400d643cf088925ddb21"} {"level":"debug","ts":"2026-07-22T18:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbe939fa61766f730c6e6d03b45c018945dd5f06c92a400d643cf088925ddb21","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35f26a07046838c3504a1dba0c6ee4d3bccc06cd4a68c82280705afae35ae62d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:58:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:58:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35f26a07046838c3504a1dba0c6ee4d3bccc06cd4a68c82280705afae35ae62d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbe939fa61766f730c6e6d03b45c018945dd5f06c92a400d643cf088925ddb21"} {"level":"info","ts":"2026-07-22T18:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35f26a07046838c3504a1dba0c6ee4d3bccc06cd4a68c82280705afae35ae62d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35f26a07046838c3504a1dba0c6ee4d3bccc06cd4a68c82280705afae35ae62d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35f26a07046838c3504a1dba0c6ee4d3bccc06cd4a68c82280705afae35ae62d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35f26a07046838c3504a1dba0c6ee4d3bccc06cd4a68c82280705afae35ae62d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35f26a07046838c3504a1dba0c6ee4d3bccc06cd4a68c82280705afae35ae62d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35f26a07046838c3504a1dba0c6ee4d3bccc06cd4a68c82280705afae35ae62d"} {"level":"debug","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbe939fa61766f730c6e6d03b45c018945dd5f06c92a400d643cf088925ddb21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:58:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:58:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dbe939fa61766f730c6e6d03b45c018945dd5f06c92a400d643cf088925ddb21"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbe939fa61766f730c6e6d03b45c018945dd5f06c92a400d643cf088925ddb21","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35f26a07046838c3504a1dba0c6ee4d3bccc06cd4a68c82280705afae35ae62d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbe939fa61766f730c6e6d03b45c018945dd5f06c92a400d643cf088925ddb21","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35f26a07046838c3504a1dba0c6ee4d3bccc06cd4a68c82280705afae35ae62d"} {"level":"debug","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbe939fa61766f730c6e6d03b45c018945dd5f06c92a400d643cf088925ddb21"} {"level":"debug","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47"} {"level":"error","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35f26a07046838c3504a1dba0c6ee4d3bccc06cd4a68c82280705afae35ae62d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:58:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:58:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35f26a07046838c3504a1dba0c6ee4d3bccc06cd4a68c82280705afae35ae62d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35f26a07046838c3504a1dba0c6ee4d3bccc06cd4a68c82280705afae35ae62d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35f26a07046838c3504a1dba0c6ee4d3bccc06cd4a68c82280705afae35ae62d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47"} {"level":"info","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35f26a07046838c3504a1dba0c6ee4d3bccc06cd4a68c82280705afae35ae62d"} {"level":"debug","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:58:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:58:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195"} {"level":"debug","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:58:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:58:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47"} {"level":"info","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195"} {"level":"debug","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2bf233d88f54f5471d2eee9d97f27b70da96f3120a0f0411e1c35ae47704b5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2bf233d88f54f5471d2eee9d97f27b70da96f3120a0f0411e1c35ae47704b5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2bf233d88f54f5471d2eee9d97f27b70da96f3120a0f0411e1c35ae47704b5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2bf233d88f54f5471d2eee9d97f27b70da96f3120a0f0411e1c35ae47704b5f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2bf233d88f54f5471d2eee9d97f27b70da96f3120a0f0411e1c35ae47704b5f"} {"level":"info","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2bf233d88f54f5471d2eee9d97f27b70da96f3120a0f0411e1c35ae47704b5f"} {"level":"debug","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2bf233d88f54f5471d2eee9d97f27b70da96f3120a0f0411e1c35ae47704b5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:58:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:58:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2bf233d88f54f5471d2eee9d97f27b70da96f3120a0f0411e1c35ae47704b5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2bf233d88f54f5471d2eee9d97f27b70da96f3120a0f0411e1c35ae47704b5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2bf233d88f54f5471d2eee9d97f27b70da96f3120a0f0411e1c35ae47704b5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2bf233d88f54f5471d2eee9d97f27b70da96f3120a0f0411e1c35ae47704b5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2bf233d88f54f5471d2eee9d97f27b70da96f3120a0f0411e1c35ae47704b5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2bf233d88f54f5471d2eee9d97f27b70da96f3120a0f0411e1c35ae47704b5f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2bf233d88f54f5471d2eee9d97f27b70da96f3120a0f0411e1c35ae47704b5f"} {"level":"debug","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2bf233d88f54f5471d2eee9d97f27b70da96f3120a0f0411e1c35ae47704b5f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2bf233d88f54f5471d2eee9d97f27b70da96f3120a0f0411e1c35ae47704b5f"} {"level":"debug","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"798e8b913d89fef2a7b007468de13a5fad1ff3c166110bebf4a428aa08c4ec79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"798e8b913d89fef2a7b007468de13a5fad1ff3c166110bebf4a428aa08c4ec79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/798e8b913d89fef2a7b007468de13a5fad1ff3c166110bebf4a428aa08c4ec79"} {"level":"info","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"798e8b913d89fef2a7b007468de13a5fad1ff3c166110bebf4a428aa08c4ec79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:58:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:58:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["798e8b913d89fef2a7b007468de13a5fad1ff3c166110bebf4a428aa08c4ec79"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"798e8b913d89fef2a7b007468de13a5fad1ff3c166110bebf4a428aa08c4ec79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e"} {"level":"info","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:58:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:58:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/798e8b913d89fef2a7b007468de13a5fad1ff3c166110bebf4a428aa08c4ec79"} {"level":"info","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2bf233d88f54f5471d2eee9d97f27b70da96f3120a0f0411e1c35ae47704b5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:58:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:58:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2bf233d88f54f5471d2eee9d97f27b70da96f3120a0f0411e1c35ae47704b5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2bf233d88f54f5471d2eee9d97f27b70da96f3120a0f0411e1c35ae47704b5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"798e8b913d89fef2a7b007468de13a5fad1ff3c166110bebf4a428aa08c4ec79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30"} {"level":"info","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e"} {"level":"info","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2bf233d88f54f5471d2eee9d97f27b70da96f3120a0f0411e1c35ae47704b5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:58:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:58:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31c7dd75e95aae787113a852e85290ec8dd00c6c22672a5f0b49919177cfdda9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/798e8b913d89fef2a7b007468de13a5fad1ff3c166110bebf4a428aa08c4ec79"} {"level":"info","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31c7dd75e95aae787113a852e85290ec8dd00c6c22672a5f0b49919177cfdda9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:58:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:58:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2bf233d88f54f5471d2eee9d97f27b70da96f3120a0f0411e1c35ae47704b5f"} {"level":"info","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30"} {"level":"info","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31c7dd75e95aae787113a852e85290ec8dd00c6c22672a5f0b49919177cfdda9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31c7dd75e95aae787113a852e85290ec8dd00c6c22672a5f0b49919177cfdda9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:58:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:58:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31c7dd75e95aae787113a852e85290ec8dd00c6c22672a5f0b49919177cfdda9"} {"level":"info","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31c7dd75e95aae787113a852e85290ec8dd00c6c22672a5f0b49919177cfdda9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:58:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:58:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31c7dd75e95aae787113a852e85290ec8dd00c6c22672a5f0b49919177cfdda9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31c7dd75e95aae787113a852e85290ec8dd00c6c22672a5f0b49919177cfdda9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31c7dd75e95aae787113a852e85290ec8dd00c6c22672a5f0b49919177cfdda9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e"} {"level":"debug","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5"} {"level":"info","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f"} {"level":"debug","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:58:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:58:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30"} {"level":"info","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:58:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:58:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31c7dd75e95aae787113a852e85290ec8dd00c6c22672a5f0b49919177cfdda9"} {"level":"info","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345"} {"level":"info","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5"} {"level":"info","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f"} {"level":"debug","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:58:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:58:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345"} {"level":"debug","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345"} {"level":"debug","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:58:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:58:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345"} {"level":"debug","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345"} {"level":"debug","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:58:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:58:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345"} {"level":"debug","ts":"2026-07-22T18:58:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:58:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345"} {"level":"debug","ts":"2026-07-22T18:58:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:58:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:58:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:58:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345"} {"level":"info","ts":"2026-07-22T18:58:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3912f1c9-a51c-4a04-afd8-dd29c4e09eaf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:55282","PortSpecifier":{"PortValue":55282}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3912f1c9-a51c-4a04-afd8-dd29c4e09eaf","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T18:58:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3912f1c9-a51c-4a04-afd8-dd29c4e09eaf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:55282","PortSpecifier":{"PortValue":55282}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784746707,"nanos":310910706},"http":{"id":"3912f1c9-a51c-4a04-afd8-dd29c4e09eaf","method":"POST","headers":{":authority":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T18:58:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3912f1c9-a51c-4a04-afd8-dd29c4e09eaf","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T18:58:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3912f1c9-a51c-4a04-afd8-dd29c4e09eaf","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8ab0d4f6-f8f1-4cf4-9efe-fca7c4ab5850","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a401cdc-ebb5-4d31-80cd-b4a9f6027e30"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa1ce497e2e7"]}} {"level":"debug","ts":"2026-07-22T18:58:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3912f1c9-a51c-4a04-afd8-dd29c4e09eaf","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa1ce497e2e7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a401cdc-ebb5-4d31-80cd-b4a9f6027e30"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8ab0d4f6-f8f1-4cf4-9efe-fca7c4ab5850","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"34698b12faef1290bddb911dad7b917557e4788005c9d7d2fd0169cd983e8312"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T18:58:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3912f1c9-a51c-4a04-afd8-dd29c4e09eaf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T18:58:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3912f1c9-a51c-4a04-afd8-dd29c4e09eaf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T18:58:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3912f1c9-a51c-4a04-afd8-dd29c4e09eaf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d24283/auth-test-model-d24283\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d24283/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T18:58:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3912f1c9-a51c-4a04-afd8-dd29c4e09eaf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T18:58:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3912f1c9-a51c-4a04-afd8-dd29c4e09eaf","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T18:58:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3912f1c9-a51c-4a04-afd8-dd29c4e09eaf","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T18:58:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3912f1c9-a51c-4a04-afd8-dd29c4e09eaf","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T18:58:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3912f1c9-a51c-4a04-afd8-dd29c4e09eaf","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T18:58:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"005bdcf0-4039-4e12-a892-440ab0181292","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:42164","PortSpecifier":{"PortValue":42164}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"005bdcf0-4039-4e12-a892-440ab0181292","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-63c82d.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T18:58:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"005bdcf0-4039-4e12-a892-440ab0181292","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:42164","PortSpecifier":{"PortValue":42164}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784746707,"nanos":357090320},"http":{"id":"005bdcf0-4039-4e12-a892-440ab0181292","method":"POST","headers":{":authority":"e2e-shared-b-63c82d.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T18:58:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"005bdcf0-4039-4e12-a892-440ab0181292","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T18:58:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"005bdcf0-4039-4e12-a892-440ab0181292","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8ab0d4f6-f8f1-4cf4-9efe-fca7c4ab5850","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a401cdc-ebb5-4d31-80cd-b4a9f6027e30"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa1ce497e2e7"]}} {"level":"debug","ts":"2026-07-22T18:58:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"005bdcf0-4039-4e12-a892-440ab0181292","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa1ce497e2e7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a401cdc-ebb5-4d31-80cd-b4a9f6027e30"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8ab0d4f6-f8f1-4cf4-9efe-fca7c4ab5850","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-63c82d.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T18:58:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"005bdcf0-4039-4e12-a892-440ab0181292","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T18:58:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"005bdcf0-4039-4e12-a892-440ab0181292","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T18:58:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"005bdcf0-4039-4e12-a892-440ab0181292","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-63c82d/auth-test-model-63c82d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-63c82d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T18:58:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"005bdcf0-4039-4e12-a892-440ab0181292","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T18:58:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"005bdcf0-4039-4e12-a892-440ab0181292","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T18:58:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"005bdcf0-4039-4e12-a892-440ab0181292","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-22T18:58:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"005bdcf0-4039-4e12-a892-440ab0181292","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T18:58:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"005bdcf0-4039-4e12-a892-440ab0181292","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T18:58:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7fcd63f7-8d82-401a-908a-de4f3429652d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:42172","PortSpecifier":{"PortValue":42172}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7fcd63f7-8d82-401a-908a-de4f3429652d","method":"GET","path":"/maas-api/v1/api-keys/f6f12db3-1395-4eff-9cf5-eb5e0e1103e1","host":"e2e-shared-b-63c82d.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T18:58:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7fcd63f7-8d82-401a-908a-de4f3429652d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:42172","PortSpecifier":{"PortValue":42172}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784746707,"nanos":402760112},"http":{"id":"7fcd63f7-8d82-401a-908a-de4f3429652d","method":"GET","headers":{":authority":"e2e-shared-b-63c82d.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/f6f12db3-1395-4eff-9cf5-eb5e0e1103e1",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T18:58:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7fcd63f7-8d82-401a-908a-de4f3429652d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T18:58:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7fcd63f7-8d82-401a-908a-de4f3429652d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8ab0d4f6-f8f1-4cf4-9efe-fca7c4ab5850","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a401cdc-ebb5-4d31-80cd-b4a9f6027e30"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa1ce497e2e7"]}} {"level":"debug","ts":"2026-07-22T18:58:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7fcd63f7-8d82-401a-908a-de4f3429652d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa1ce497e2e7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a401cdc-ebb5-4d31-80cd-b4a9f6027e30"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8ab0d4f6-f8f1-4cf4-9efe-fca7c4ab5850","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-63c82d.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/f6f12db3-1395-4eff-9cf5-eb5e0e1103e1",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T18:58:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7fcd63f7-8d82-401a-908a-de4f3429652d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T18:58:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7fcd63f7-8d82-401a-908a-de4f3429652d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T18:58:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7fcd63f7-8d82-401a-908a-de4f3429652d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-63c82d/auth-test-model-63c82d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-63c82d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T18:58:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7fcd63f7-8d82-401a-908a-de4f3429652d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T18:58:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7fcd63f7-8d82-401a-908a-de4f3429652d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T18:58:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7fcd63f7-8d82-401a-908a-de4f3429652d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T18:58:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7fcd63f7-8d82-401a-908a-de4f3429652d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T18:58:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7fcd63f7-8d82-401a-908a-de4f3429652d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T18:58:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"63d1a884-a185-4ac0-87a7-c38d0f1d2b76","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:55292","PortSpecifier":{"PortValue":55292}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"63d1a884-a185-4ac0-87a7-c38d0f1d2b76","method":"GET","path":"/maas-api/v1/api-keys/f6f12db3-1395-4eff-9cf5-eb5e0e1103e1","host":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T18:58:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"63d1a884-a185-4ac0-87a7-c38d0f1d2b76","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:55292","PortSpecifier":{"PortValue":55292}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784746707,"nanos":435508174},"http":{"id":"63d1a884-a185-4ac0-87a7-c38d0f1d2b76","method":"GET","headers":{":authority":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/f6f12db3-1395-4eff-9cf5-eb5e0e1103e1",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T18:58:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"63d1a884-a185-4ac0-87a7-c38d0f1d2b76","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T18:58:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"63d1a884-a185-4ac0-87a7-c38d0f1d2b76","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8ab0d4f6-f8f1-4cf4-9efe-fca7c4ab5850","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a401cdc-ebb5-4d31-80cd-b4a9f6027e30"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa1ce497e2e7"]}} {"level":"debug","ts":"2026-07-22T18:58:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"63d1a884-a185-4ac0-87a7-c38d0f1d2b76","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa1ce497e2e7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a401cdc-ebb5-4d31-80cd-b4a9f6027e30"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8ab0d4f6-f8f1-4cf4-9efe-fca7c4ab5850","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"34698b12faef1290bddb911dad7b917557e4788005c9d7d2fd0169cd983e8312"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/f6f12db3-1395-4eff-9cf5-eb5e0e1103e1",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T18:58:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"63d1a884-a185-4ac0-87a7-c38d0f1d2b76","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T18:58:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"63d1a884-a185-4ac0-87a7-c38d0f1d2b76","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T18:58:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"63d1a884-a185-4ac0-87a7-c38d0f1d2b76","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d24283/auth-test-model-d24283\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d24283/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T18:58:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"63d1a884-a185-4ac0-87a7-c38d0f1d2b76","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T18:58:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"63d1a884-a185-4ac0-87a7-c38d0f1d2b76","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T18:58:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"63d1a884-a185-4ac0-87a7-c38d0f1d2b76","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-22T18:58:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"63d1a884-a185-4ac0-87a7-c38d0f1d2b76","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T18:58:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"63d1a884-a185-4ac0-87a7-c38d0f1d2b76","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T18:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dbe939fa61766f730c6e6d03b45c018945dd5f06c92a400d643cf088925ddb21"} {"level":"info","ts":"2026-07-22T18:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30"} {"level":"info","ts":"2026-07-22T18:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d2bf233d88f54f5471d2eee9d97f27b70da96f3120a0f0411e1c35ae47704b5f"} {"level":"info","ts":"2026-07-22T18:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/798e8b913d89fef2a7b007468de13a5fad1ff3c166110bebf4a428aa08c4ec79"} {"level":"info","ts":"2026-07-22T18:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e"} {"level":"info","ts":"2026-07-22T18:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/31c7dd75e95aae787113a852e85290ec8dd00c6c22672a5f0b49919177cfdda9"} {"level":"info","ts":"2026-07-22T18:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5"} {"level":"info","ts":"2026-07-22T18:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195"} {"level":"info","ts":"2026-07-22T18:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47"} {"level":"info","ts":"2026-07-22T18:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f"} {"level":"info","ts":"2026-07-22T18:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345"} {"level":"info","ts":"2026-07-22T18:58:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/35f26a07046838c3504a1dba0c6ee4d3bccc06cd4a68c82280705afae35ae62d"} {"level":"debug","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"798e8b913d89fef2a7b007468de13a5fad1ff3c166110bebf4a428aa08c4ec79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"798e8b913d89fef2a7b007468de13a5fad1ff3c166110bebf4a428aa08c4ec79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"798e8b913d89fef2a7b007468de13a5fad1ff3c166110bebf4a428aa08c4ec79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"798e8b913d89fef2a7b007468de13a5fad1ff3c166110bebf4a428aa08c4ec79","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/798e8b913d89fef2a7b007468de13a5fad1ff3c166110bebf4a428aa08c4ec79"} {"level":"debug","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"798e8b913d89fef2a7b007468de13a5fad1ff3c166110bebf4a428aa08c4ec79","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/798e8b913d89fef2a7b007468de13a5fad1ff3c166110bebf4a428aa08c4ec79"} {"level":"debug","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"798e8b913d89fef2a7b007468de13a5fad1ff3c166110bebf4a428aa08c4ec79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:58:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:58:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["798e8b913d89fef2a7b007468de13a5fad1ff3c166110bebf4a428aa08c4ec79"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"798e8b913d89fef2a7b007468de13a5fad1ff3c166110bebf4a428aa08c4ec79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"798e8b913d89fef2a7b007468de13a5fad1ff3c166110bebf4a428aa08c4ec79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5"} {"level":"debug","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:58:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:58:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/798e8b913d89fef2a7b007468de13a5fad1ff3c166110bebf4a428aa08c4ec79"} {"level":"info","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5"} {"level":"info","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5"} {"level":"debug","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5"} {"level":"debug","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:58:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:58:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5"} {"level":"debug","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5"} {"level":"debug","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35f26a07046838c3504a1dba0c6ee4d3bccc06cd4a68c82280705afae35ae62d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35f26a07046838c3504a1dba0c6ee4d3bccc06cd4a68c82280705afae35ae62d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35f26a07046838c3504a1dba0c6ee4d3bccc06cd4a68c82280705afae35ae62d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35f26a07046838c3504a1dba0c6ee4d3bccc06cd4a68c82280705afae35ae62d"} {"level":"info","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35f26a07046838c3504a1dba0c6ee4d3bccc06cd4a68c82280705afae35ae62d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:58:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:58:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35f26a07046838c3504a1dba0c6ee4d3bccc06cd4a68c82280705afae35ae62d"} {"level":"info","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35f26a07046838c3504a1dba0c6ee4d3bccc06cd4a68c82280705afae35ae62d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35f26a07046838c3504a1dba0c6ee4d3bccc06cd4a68c82280705afae35ae62d"} {"level":"debug","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35f26a07046838c3504a1dba0c6ee4d3bccc06cd4a68c82280705afae35ae62d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:58:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:58:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35f26a07046838c3504a1dba0c6ee4d3bccc06cd4a68c82280705afae35ae62d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35f26a07046838c3504a1dba0c6ee4d3bccc06cd4a68c82280705afae35ae62d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35f26a07046838c3504a1dba0c6ee4d3bccc06cd4a68c82280705afae35ae62d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5"} {"level":"debug","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35f26a07046838c3504a1dba0c6ee4d3bccc06cd4a68c82280705afae35ae62d"} {"level":"info","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30"} {"level":"info","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30"} {"level":"info","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30"} {"level":"debug","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbe939fa61766f730c6e6d03b45c018945dd5f06c92a400d643cf088925ddb21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbe939fa61766f730c6e6d03b45c018945dd5f06c92a400d643cf088925ddb21","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbe939fa61766f730c6e6d03b45c018945dd5f06c92a400d643cf088925ddb21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbe939fa61766f730c6e6d03b45c018945dd5f06c92a400d643cf088925ddb21"} {"level":"info","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbe939fa61766f730c6e6d03b45c018945dd5f06c92a400d643cf088925ddb21","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:58:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:58:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbe939fa61766f730c6e6d03b45c018945dd5f06c92a400d643cf088925ddb21"} {"level":"info","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbe939fa61766f730c6e6d03b45c018945dd5f06c92a400d643cf088925ddb21","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbe939fa61766f730c6e6d03b45c018945dd5f06c92a400d643cf088925ddb21"} {"level":"debug","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbe939fa61766f730c6e6d03b45c018945dd5f06c92a400d643cf088925ddb21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:58:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:58:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dbe939fa61766f730c6e6d03b45c018945dd5f06c92a400d643cf088925ddb21"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbe939fa61766f730c6e6d03b45c018945dd5f06c92a400d643cf088925ddb21","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbe939fa61766f730c6e6d03b45c018945dd5f06c92a400d643cf088925ddb21","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30"} {"level":"info","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbe939fa61766f730c6e6d03b45c018945dd5f06c92a400d643cf088925ddb21"} {"level":"debug","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47"} {"level":"debug","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47"} {"level":"debug","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:58:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:58:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47"} {"level":"info","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:58:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:58:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345"} {"level":"info","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:58:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:58:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47"} {"level":"info","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:58:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:58:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2bf233d88f54f5471d2eee9d97f27b70da96f3120a0f0411e1c35ae47704b5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345"} {"level":"info","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2bf233d88f54f5471d2eee9d97f27b70da96f3120a0f0411e1c35ae47704b5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:58:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:58:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47"} {"level":"info","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2bf233d88f54f5471d2eee9d97f27b70da96f3120a0f0411e1c35ae47704b5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2bf233d88f54f5471d2eee9d97f27b70da96f3120a0f0411e1c35ae47704b5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:58:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:58:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2bf233d88f54f5471d2eee9d97f27b70da96f3120a0f0411e1c35ae47704b5f"} {"level":"info","ts":"2026-07-22T18:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345"} {"level":"info","ts":"2026-07-22T18:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2bf233d88f54f5471d2eee9d97f27b70da96f3120a0f0411e1c35ae47704b5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:58:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:58:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2bf233d88f54f5471d2eee9d97f27b70da96f3120a0f0411e1c35ae47704b5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2bf233d88f54f5471d2eee9d97f27b70da96f3120a0f0411e1c35ae47704b5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47"} {"level":"info","ts":"2026-07-22T18:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2bf233d88f54f5471d2eee9d97f27b70da96f3120a0f0411e1c35ae47704b5f"} {"level":"info","ts":"2026-07-22T18:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:58:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:58:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2bf233d88f54f5471d2eee9d97f27b70da96f3120a0f0411e1c35ae47704b5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:58:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:58:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195"} {"level":"info","ts":"2026-07-22T18:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:58:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:58:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345"} {"level":"info","ts":"2026-07-22T18:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47"} {"level":"info","ts":"2026-07-22T18:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:58:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:58:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195"} {"level":"info","ts":"2026-07-22T18:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31c7dd75e95aae787113a852e85290ec8dd00c6c22672a5f0b49919177cfdda9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31c7dd75e95aae787113a852e85290ec8dd00c6c22672a5f0b49919177cfdda9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:58:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:58:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345"} {"level":"info","ts":"2026-07-22T18:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31c7dd75e95aae787113a852e85290ec8dd00c6c22672a5f0b49919177cfdda9"} {"level":"info","ts":"2026-07-22T18:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:58:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:58:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47"} {"level":"info","ts":"2026-07-22T18:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31c7dd75e95aae787113a852e85290ec8dd00c6c22672a5f0b49919177cfdda9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:58:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:58:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31c7dd75e95aae787113a852e85290ec8dd00c6c22672a5f0b49919177cfdda9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f"} {"level":"info","ts":"2026-07-22T18:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31c7dd75e95aae787113a852e85290ec8dd00c6c22672a5f0b49919177cfdda9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:58:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:58:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:58:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:58:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e"} {"level":"info","ts":"2026-07-22T18:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31c7dd75e95aae787113a852e85290ec8dd00c6c22672a5f0b49919177cfdda9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:58:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:58:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195"} {"level":"info","ts":"2026-07-22T18:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345"} {"level":"info","ts":"2026-07-22T18:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31c7dd75e95aae787113a852e85290ec8dd00c6c22672a5f0b49919177cfdda9"} {"level":"info","ts":"2026-07-22T18:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:58:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:58:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f"} {"level":"info","ts":"2026-07-22T18:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e"} {"level":"error","ts":"2026-07-22T18:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T18:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:58:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:58:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"090b58bb-58b1-41a3-824d-b53744631633","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:42298","PortSpecifier":{"PortValue":42298}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"090b58bb-58b1-41a3-824d-b53744631633","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T18:58:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"090b58bb-58b1-41a3-824d-b53744631633","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:42298","PortSpecifier":{"PortValue":42298}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784746726,"nanos":929282797},"http":{"id":"090b58bb-58b1-41a3-824d-b53744631633","method":"POST","headers":{":authority":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T18:58:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"090b58bb-58b1-41a3-824d-b53744631633","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T18:58:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"090b58bb-58b1-41a3-824d-b53744631633","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8ab0d4f6-f8f1-4cf4-9efe-fca7c4ab5850","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a401cdc-ebb5-4d31-80cd-b4a9f6027e30"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa1ce497e2e7"]}} {"level":"debug","ts":"2026-07-22T18:58:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"090b58bb-58b1-41a3-824d-b53744631633","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa1ce497e2e7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a401cdc-ebb5-4d31-80cd-b4a9f6027e30"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8ab0d4f6-f8f1-4cf4-9efe-fca7c4ab5850","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"34698b12faef1290bddb911dad7b917557e4788005c9d7d2fd0169cd983e8312"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T18:58:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"090b58bb-58b1-41a3-824d-b53744631633","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T18:58:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"090b58bb-58b1-41a3-824d-b53744631633","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T18:58:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"090b58bb-58b1-41a3-824d-b53744631633","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d24283/auth-test-model-d24283\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d24283/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T18:58:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"090b58bb-58b1-41a3-824d-b53744631633","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T18:58:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"090b58bb-58b1-41a3-824d-b53744631633","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T18:58:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"090b58bb-58b1-41a3-824d-b53744631633","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T18:58:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"090b58bb-58b1-41a3-824d-b53744631633","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T18:58:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"090b58bb-58b1-41a3-824d-b53744631633","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T18:58:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d984a49e-1ef5-4208-9a50-85b286f00a29","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:48666","PortSpecifier":{"PortValue":48666}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d984a49e-1ef5-4208-9a50-85b286f00a29","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-63c82d.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T18:58:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d984a49e-1ef5-4208-9a50-85b286f00a29","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:48666","PortSpecifier":{"PortValue":48666}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784746726,"nanos":968429166},"http":{"id":"d984a49e-1ef5-4208-9a50-85b286f00a29","method":"POST","headers":{":authority":"e2e-shared-b-63c82d.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T18:58:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d984a49e-1ef5-4208-9a50-85b286f00a29","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T18:58:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d984a49e-1ef5-4208-9a50-85b286f00a29","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8ab0d4f6-f8f1-4cf4-9efe-fca7c4ab5850","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a401cdc-ebb5-4d31-80cd-b4a9f6027e30"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa1ce497e2e7"]}} {"level":"debug","ts":"2026-07-22T18:58:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d984a49e-1ef5-4208-9a50-85b286f00a29","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa1ce497e2e7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a401cdc-ebb5-4d31-80cd-b4a9f6027e30"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8ab0d4f6-f8f1-4cf4-9efe-fca7c4ab5850","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-63c82d.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T18:58:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d984a49e-1ef5-4208-9a50-85b286f00a29","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T18:58:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d984a49e-1ef5-4208-9a50-85b286f00a29","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T18:58:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d984a49e-1ef5-4208-9a50-85b286f00a29","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-63c82d/auth-test-model-63c82d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-63c82d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T18:58:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d984a49e-1ef5-4208-9a50-85b286f00a29","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T18:58:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d984a49e-1ef5-4208-9a50-85b286f00a29","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T18:58:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d984a49e-1ef5-4208-9a50-85b286f00a29","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T18:58:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d984a49e-1ef5-4208-9a50-85b286f00a29","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T18:58:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d984a49e-1ef5-4208-9a50-85b286f00a29","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T18:58:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"883ee2ad-759a-43ba-9276-2e3c3145cad0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:42302","PortSpecifier":{"PortValue":42302}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"883ee2ad-759a-43ba-9276-2e3c3145cad0","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T18:58:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"883ee2ad-759a-43ba-9276-2e3c3145cad0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:42302","PortSpecifier":{"PortValue":42302}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784746727,"nanos":9192898},"http":{"id":"883ee2ad-759a-43ba-9276-2e3c3145cad0","method":"POST","headers":{":authority":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T18:58:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"883ee2ad-759a-43ba-9276-2e3c3145cad0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-dZx61EtrxmanUShB_CRmHQTw8xyaAWcBbytwWtOF2v8XVXxfP4s1qpkz13aO"} {"level":"debug","ts":"2026-07-22T18:58:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"883ee2ad-759a-43ba-9276-2e3c3145cad0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-dZx61EtrxmanUShB_CRmHQTw8xyaAWcBbytwWtOF2v8XVXxfP4s1qpkz13aO\"}"} {"level":"debug","ts":"2026-07-22T18:58:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"883ee2ad-759a-43ba-9276-2e3c3145cad0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"17e8525b-e385-4958-8bfb-d65bbb1d96b9","keyName":"e2e-auth-iso-a-fbb4f9","subscription":"e2e-auth-iso-8d3b90","tenant":"e2e-shared-a-d24283","userId":"17e8525b-e385-4958-8bfb-d65bbb1d96b9","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T18:58:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"883ee2ad-759a-43ba-9276-2e3c3145cad0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T18:58:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"883ee2ad-759a-43ba-9276-2e3c3145cad0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T18:58:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"883ee2ad-759a-43ba-9276-2e3c3145cad0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T18:58:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"883ee2ad-759a-43ba-9276-2e3c3145cad0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d24283/auth-test-model-d24283\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d24283/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T18:58:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"883ee2ad-759a-43ba-9276-2e3c3145cad0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T18:58:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"883ee2ad-759a-43ba-9276-2e3c3145cad0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T18:58:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"883ee2ad-759a-43ba-9276-2e3c3145cad0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-8d3b90"} {"level":"debug","ts":"2026-07-22T18:58:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"883ee2ad-759a-43ba-9276-2e3c3145cad0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-22T18:58:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"883ee2ad-759a-43ba-9276-2e3c3145cad0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T18:58:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"883ee2ad-759a-43ba-9276-2e3c3145cad0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T18:58:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fe8352198c389d88963158fa83d3194d3fdfafbf9cf988a70b63227a411f6255"} {"level":"info","ts":"2026-07-22T18:58:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f175b9454ee59e9cd76249cfebfb6f47ebeee4922f318944e5821637711ada30"} {"level":"info","ts":"2026-07-22T18:58:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/798e8b913d89fef2a7b007468de13a5fad1ff3c166110bebf4a428aa08c4ec79"} {"level":"info","ts":"2026-07-22T18:58:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d5e5890dfb7159630b1d5b119ec80e979ae63655a0d9041da59476f82a64a1e2"} {"level":"info","ts":"2026-07-22T18:58:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30"} {"level":"info","ts":"2026-07-22T18:58:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dbe939fa61766f730c6e6d03b45c018945dd5f06c92a400d643cf088925ddb21"} {"level":"info","ts":"2026-07-22T18:58:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/029853ea3a3bda64b65aa0493f4c0874c6a479876fb95c0098f489e4446fbf47"} {"level":"info","ts":"2026-07-22T18:58:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5"} {"level":"info","ts":"2026-07-22T18:58:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/75e51511f7d87f18d55a64b1f4a7eb1ff6b9d4f73f4a6c40f50bac75b5e51d39"} {"level":"info","ts":"2026-07-22T18:58:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fc726ed8e1f1556a4aff1be7b701b5805757d5af5225de958935519a3f77b345"} {"level":"info","ts":"2026-07-22T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9bf5744c345c2060bd35dc18e9266a7b10711874af96201ae4300a30d5d0663b"} {"level":"info","ts":"2026-07-22T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2"} {"level":"info","ts":"2026-07-22T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6d79e9ac58b8338621dc37f65661bda740180d844a6891319c1439645e4f5cba"} {"level":"info","ts":"2026-07-22T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6d72b04ffd3fe1cbad579f5a4209a25b5f2e7567d79eb190661f2331ae4693ce"} {"level":"info","ts":"2026-07-22T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/45ee56dd134bb3b7e2031453f87ace0edf8e89198dce04842e4476cbe3f6caf7"} {"level":"info","ts":"2026-07-22T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b11acb42d245cfdcbfcf56991548d6f36ad0b7644341f19876fd41397f72082b"} {"level":"info","ts":"2026-07-22T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f"} {"level":"info","ts":"2026-07-22T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e"} {"level":"info","ts":"2026-07-22T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/35f26a07046838c3504a1dba0c6ee4d3bccc06cd4a68c82280705afae35ae62d"} {"level":"info","ts":"2026-07-22T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d2bf233d88f54f5471d2eee9d97f27b70da96f3120a0f0411e1c35ae47704b5f"} {"level":"info","ts":"2026-07-22T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0dc469dfb95354d88344b919bb7c75955a3e97ea82c042b17ae5270c51282f01"} {"level":"info","ts":"2026-07-22T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a48413a20a1b26a80f040a6c39ecf6c6a8f7d9de2bfe80d1dedf16a07540195"} {"level":"info","ts":"2026-07-22T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/31c7dd75e95aae787113a852e85290ec8dd00c6c22672a5f0b49919177cfdda9"} {"level":"info","ts":"2026-07-22T18:58:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/34698b12faef1290bddb911dad7b917557e4788005c9d7d2fd0169cd983e8312"} {"level":"debug","ts":"2026-07-22T18:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a390b175bdb13266e1224d3b5d0c5b8f847c0590bc5857128c010b54b792d5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:59:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:59:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a390b175bdb13266e1224d3b5d0c5b8f847c0590bc5857128c010b54b792d5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a390b175bdb13266e1224d3b5d0c5b8f847c0590bc5857128c010b54b792d5c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a390b175bdb13266e1224d3b5d0c5b8f847c0590bc5857128c010b54b792d5c"} {"level":"debug","ts":"2026-07-22T18:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a390b175bdb13266e1224d3b5d0c5b8f847c0590bc5857128c010b54b792d5c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a390b175bdb13266e1224d3b5d0c5b8f847c0590bc5857128c010b54b792d5c"} {"level":"debug","ts":"2026-07-22T18:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a390b175bdb13266e1224d3b5d0c5b8f847c0590bc5857128c010b54b792d5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:59:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:59:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a390b175bdb13266e1224d3b5d0c5b8f847c0590bc5857128c010b54b792d5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a390b175bdb13266e1224d3b5d0c5b8f847c0590bc5857128c010b54b792d5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a390b175bdb13266e1224d3b5d0c5b8f847c0590bc5857128c010b54b792d5c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a390b175bdb13266e1224d3b5d0c5b8f847c0590bc5857128c010b54b792d5c"} {"level":"debug","ts":"2026-07-22T18:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97ee6bdbf11c7a5133c15fd692e1df3363057c7bcf533933b019400fd02a81f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:59:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:59:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97ee6bdbf11c7a5133c15fd692e1df3363057c7bcf533933b019400fd02a81f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97ee6bdbf11c7a5133c15fd692e1df3363057c7bcf533933b019400fd02a81f0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97ee6bdbf11c7a5133c15fd692e1df3363057c7bcf533933b019400fd02a81f0"} {"level":"debug","ts":"2026-07-22T18:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97ee6bdbf11c7a5133c15fd692e1df3363057c7bcf533933b019400fd02a81f0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97ee6bdbf11c7a5133c15fd692e1df3363057c7bcf533933b019400fd02a81f0"} {"level":"debug","ts":"2026-07-22T18:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97ee6bdbf11c7a5133c15fd692e1df3363057c7bcf533933b019400fd02a81f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:59:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:59:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97ee6bdbf11c7a5133c15fd692e1df3363057c7bcf533933b019400fd02a81f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97ee6bdbf11c7a5133c15fd692e1df3363057c7bcf533933b019400fd02a81f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97ee6bdbf11c7a5133c15fd692e1df3363057c7bcf533933b019400fd02a81f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:59:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:59:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97ee6bdbf11c7a5133c15fd692e1df3363057c7bcf533933b019400fd02a81f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97ee6bdbf11c7a5133c15fd692e1df3363057c7bcf533933b019400fd02a81f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97ee6bdbf11c7a5133c15fd692e1df3363057c7bcf533933b019400fd02a81f0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97ee6bdbf11c7a5133c15fd692e1df3363057c7bcf533933b019400fd02a81f0"} {"level":"debug","ts":"2026-07-22T18:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97ee6bdbf11c7a5133c15fd692e1df3363057c7bcf533933b019400fd02a81f0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97ee6bdbf11c7a5133c15fd692e1df3363057c7bcf533933b019400fd02a81f0"} {"level":"debug","ts":"2026-07-22T18:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97ee6bdbf11c7a5133c15fd692e1df3363057c7bcf533933b019400fd02a81f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:59:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:59:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97ee6bdbf11c7a5133c15fd692e1df3363057c7bcf533933b019400fd02a81f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97ee6bdbf11c7a5133c15fd692e1df3363057c7bcf533933b019400fd02a81f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97ee6bdbf11c7a5133c15fd692e1df3363057c7bcf533933b019400fd02a81f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:59:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:59:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97ee6bdbf11c7a5133c15fd692e1df3363057c7bcf533933b019400fd02a81f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97ee6bdbf11c7a5133c15fd692e1df3363057c7bcf533933b019400fd02a81f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97ee6bdbf11c7a5133c15fd692e1df3363057c7bcf533933b019400fd02a81f0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97ee6bdbf11c7a5133c15fd692e1df3363057c7bcf533933b019400fd02a81f0"} {"level":"debug","ts":"2026-07-22T18:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97ee6bdbf11c7a5133c15fd692e1df3363057c7bcf533933b019400fd02a81f0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97ee6bdbf11c7a5133c15fd692e1df3363057c7bcf533933b019400fd02a81f0"} {"level":"debug","ts":"2026-07-22T18:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99be737191290f7c85b0fc489bf17b386bd0b0576e3a45ecb9fbb1d8f0f758f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:59:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:59:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99be737191290f7c85b0fc489bf17b386bd0b0576e3a45ecb9fbb1d8f0f758f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99be737191290f7c85b0fc489bf17b386bd0b0576e3a45ecb9fbb1d8f0f758f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:59:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:59:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99be737191290f7c85b0fc489bf17b386bd0b0576e3a45ecb9fbb1d8f0f758f8"} {"level":"info","ts":"2026-07-22T18:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99be737191290f7c85b0fc489bf17b386bd0b0576e3a45ecb9fbb1d8f0f758f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99be737191290f7c85b0fc489bf17b386bd0b0576e3a45ecb9fbb1d8f0f758f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:59:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:59:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-22T18:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"99be737191290f7c85b0fc489bf17b386bd0b0576e3a45ecb9fbb1d8f0f758f8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"99be737191290f7c85b0fc489bf17b386bd0b0576e3a45ecb9fbb1d8f0f758f8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T18:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97ee6bdbf11c7a5133c15fd692e1df3363057c7bcf533933b019400fd02a81f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:59:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:59:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97ee6bdbf11c7a5133c15fd692e1df3363057c7bcf533933b019400fd02a81f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99be737191290f7c85b0fc489bf17b386bd0b0576e3a45ecb9fbb1d8f0f758f8"} {"level":"info","ts":"2026-07-22T18:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97ee6bdbf11c7a5133c15fd692e1df3363057c7bcf533933b019400fd02a81f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99be737191290f7c85b0fc489bf17b386bd0b0576e3a45ecb9fbb1d8f0f758f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97ee6bdbf11c7a5133c15fd692e1df3363057c7bcf533933b019400fd02a81f0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99be737191290f7c85b0fc489bf17b386bd0b0576e3a45ecb9fbb1d8f0f758f8"} {"level":"info","ts":"2026-07-22T18:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97ee6bdbf11c7a5133c15fd692e1df3363057c7bcf533933b019400fd02a81f0"} {"level":"debug","ts":"2026-07-22T18:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99be737191290f7c85b0fc489bf17b386bd0b0576e3a45ecb9fbb1d8f0f758f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:59:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:59:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99be737191290f7c85b0fc489bf17b386bd0b0576e3a45ecb9fbb1d8f0f758f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99be737191290f7c85b0fc489bf17b386bd0b0576e3a45ecb9fbb1d8f0f758f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8615d031ee83aec6d2c04c3d2fa836e190bc5cc87a789538d3f6bc5d1c17d2be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:59:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:59:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8615d031ee83aec6d2c04c3d2fa836e190bc5cc87a789538d3f6bc5d1c17d2be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99be737191290f7c85b0fc489bf17b386bd0b0576e3a45ecb9fbb1d8f0f758f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8615d031ee83aec6d2c04c3d2fa836e190bc5cc87a789538d3f6bc5d1c17d2be","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8615d031ee83aec6d2c04c3d2fa836e190bc5cc87a789538d3f6bc5d1c17d2be"} {"level":"debug","ts":"2026-07-22T18:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8615d031ee83aec6d2c04c3d2fa836e190bc5cc87a789538d3f6bc5d1c17d2be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:59:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:59:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8615d031ee83aec6d2c04c3d2fa836e190bc5cc87a789538d3f6bc5d1c17d2be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8615d031ee83aec6d2c04c3d2fa836e190bc5cc87a789538d3f6bc5d1c17d2be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8615d031ee83aec6d2c04c3d2fa836e190bc5cc87a789538d3f6bc5d1c17d2be","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99be737191290f7c85b0fc489bf17b386bd0b0576e3a45ecb9fbb1d8f0f758f8"} {"level":"info","ts":"2026-07-22T18:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8615d031ee83aec6d2c04c3d2fa836e190bc5cc87a789538d3f6bc5d1c17d2be"} {"level":"debug","ts":"2026-07-22T18:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67fabad04e87625522f31a2f25123ffa8b0422322c9cb272f54a4c5718f1aa80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:59:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:59:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67fabad04e87625522f31a2f25123ffa8b0422322c9cb272f54a4c5718f1aa80","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67fabad04e87625522f31a2f25123ffa8b0422322c9cb272f54a4c5718f1aa80","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67fabad04e87625522f31a2f25123ffa8b0422322c9cb272f54a4c5718f1aa80","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67fabad04e87625522f31a2f25123ffa8b0422322c9cb272f54a4c5718f1aa80"} {"level":"debug","ts":"2026-07-22T18:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67fabad04e87625522f31a2f25123ffa8b0422322c9cb272f54a4c5718f1aa80","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67fabad04e87625522f31a2f25123ffa8b0422322c9cb272f54a4c5718f1aa80"} {"level":"debug","ts":"2026-07-22T18:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67fabad04e87625522f31a2f25123ffa8b0422322c9cb272f54a4c5718f1aa80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:59:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:59:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67fabad04e87625522f31a2f25123ffa8b0422322c9cb272f54a4c5718f1aa80"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67fabad04e87625522f31a2f25123ffa8b0422322c9cb272f54a4c5718f1aa80","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de286b2eb9f5198b1a1c76a0b3d57676a74122ba41600973ab51292952f7374","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:59:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:59:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de286b2eb9f5198b1a1c76a0b3d57676a74122ba41600973ab51292952f7374","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67fabad04e87625522f31a2f25123ffa8b0422322c9cb272f54a4c5718f1aa80","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de286b2eb9f5198b1a1c76a0b3d57676a74122ba41600973ab51292952f7374","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de286b2eb9f5198b1a1c76a0b3d57676a74122ba41600973ab51292952f7374","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de286b2eb9f5198b1a1c76a0b3d57676a74122ba41600973ab51292952f7374"} {"level":"debug","ts":"2026-07-22T18:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de286b2eb9f5198b1a1c76a0b3d57676a74122ba41600973ab51292952f7374","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:59:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:59:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4de286b2eb9f5198b1a1c76a0b3d57676a74122ba41600973ab51292952f7374"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67fabad04e87625522f31a2f25123ffa8b0422322c9cb272f54a4c5718f1aa80"} {"level":"info","ts":"2026-07-22T18:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de286b2eb9f5198b1a1c76a0b3d57676a74122ba41600973ab51292952f7374","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de286b2eb9f5198b1a1c76a0b3d57676a74122ba41600973ab51292952f7374","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:59:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:59:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de286b2eb9f5198b1a1c76a0b3d57676a74122ba41600973ab51292952f7374"} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de286b2eb9f5198b1a1c76a0b3d57676a74122ba41600973ab51292952f7374","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de286b2eb9f5198b1a1c76a0b3d57676a74122ba41600973ab51292952f7374","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de286b2eb9f5198b1a1c76a0b3d57676a74122ba41600973ab51292952f7374","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de286b2eb9f5198b1a1c76a0b3d57676a74122ba41600973ab51292952f7374"} {"level":"debug","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de286b2eb9f5198b1a1c76a0b3d57676a74122ba41600973ab51292952f7374","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b11acb42d245cfdcbfcf56991548d6f36ad0b7644341f19876fd41397f72082b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de286b2eb9f5198b1a1c76a0b3d57676a74122ba41600973ab51292952f7374"} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b11acb42d245cfdcbfcf56991548d6f36ad0b7644341f19876fd41397f72082b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b11acb42d245cfdcbfcf56991548d6f36ad0b7644341f19876fd41397f72082b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b11acb42d245cfdcbfcf56991548d6f36ad0b7644341f19876fd41397f72082b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b11acb42d245cfdcbfcf56991548d6f36ad0b7644341f19876fd41397f72082b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b11acb42d245cfdcbfcf56991548d6f36ad0b7644341f19876fd41397f72082b"} {"level":"error","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b11acb42d245cfdcbfcf56991548d6f36ad0b7644341f19876fd41397f72082b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b11acb42d245cfdcbfcf56991548d6f36ad0b7644341f19876fd41397f72082b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de286b2eb9f5198b1a1c76a0b3d57676a74122ba41600973ab51292952f7374","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4de286b2eb9f5198b1a1c76a0b3d57676a74122ba41600973ab51292952f7374"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de286b2eb9f5198b1a1c76a0b3d57676a74122ba41600973ab51292952f7374","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b11acb42d245cfdcbfcf56991548d6f36ad0b7644341f19876fd41397f72082b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de286b2eb9f5198b1a1c76a0b3d57676a74122ba41600973ab51292952f7374","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b11acb42d245cfdcbfcf56991548d6f36ad0b7644341f19876fd41397f72082b"} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de286b2eb9f5198b1a1c76a0b3d57676a74122ba41600973ab51292952f7374"} {"level":"debug","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b11acb42d245cfdcbfcf56991548d6f36ad0b7644341f19876fd41397f72082b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b11acb42d245cfdcbfcf56991548d6f36ad0b7644341f19876fd41397f72082b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b11acb42d245cfdcbfcf56991548d6f36ad0b7644341f19876fd41397f72082b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3551057120833557921485ff857926ec32a624d0b7a58520240ac30d1224b705","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3551057120833557921485ff857926ec32a624d0b7a58520240ac30d1224b705","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b11acb42d245cfdcbfcf56991548d6f36ad0b7644341f19876fd41397f72082b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3551057120833557921485ff857926ec32a624d0b7a58520240ac30d1224b705"} {"level":"debug","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3551057120833557921485ff857926ec32a624d0b7a58520240ac30d1224b705","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3551057120833557921485ff857926ec32a624d0b7a58520240ac30d1224b705"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3551057120833557921485ff857926ec32a624d0b7a58520240ac30d1224b705","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3551057120833557921485ff857926ec32a624d0b7a58520240ac30d1224b705","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3551057120833557921485ff857926ec32a624d0b7a58520240ac30d1224b705"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3551057120833557921485ff857926ec32a624d0b7a58520240ac30d1224b705","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3551057120833557921485ff857926ec32a624d0b7a58520240ac30d1224b705\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3551057120833557921485ff857926ec32a624d0b7a58520240ac30d1224b705","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b11acb42d245cfdcbfcf56991548d6f36ad0b7644341f19876fd41397f72082b"} {"level":"debug","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3551057120833557921485ff857926ec32a624d0b7a58520240ac30d1224b705","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3551057120833557921485ff857926ec32a624d0b7a58520240ac30d1224b705","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3551057120833557921485ff857926ec32a624d0b7a58520240ac30d1224b705","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3551057120833557921485ff857926ec32a624d0b7a58520240ac30d1224b705"} {"level":"debug","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3551057120833557921485ff857926ec32a624d0b7a58520240ac30d1224b705","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3551057120833557921485ff857926ec32a624d0b7a58520240ac30d1224b705"} {"level":"debug","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3551057120833557921485ff857926ec32a624d0b7a58520240ac30d1224b705","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3551057120833557921485ff857926ec32a624d0b7a58520240ac30d1224b705"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3551057120833557921485ff857926ec32a624d0b7a58520240ac30d1224b705","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc9c6d7627c0cb35985bed2c3351d92b87d070d0088e5dc679e22f68e9c37cb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc9c6d7627c0cb35985bed2c3351d92b87d070d0088e5dc679e22f68e9c37cb0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3551057120833557921485ff857926ec32a624d0b7a58520240ac30d1224b705","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc9c6d7627c0cb35985bed2c3351d92b87d070d0088e5dc679e22f68e9c37cb0"} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc9c6d7627c0cb35985bed2c3351d92b87d070d0088e5dc679e22f68e9c37cb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc9c6d7627c0cb35985bed2c3351d92b87d070d0088e5dc679e22f68e9c37cb0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3551057120833557921485ff857926ec32a624d0b7a58520240ac30d1224b705"} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc9c6d7627c0cb35985bed2c3351d92b87d070d0088e5dc679e22f68e9c37cb0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5"} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc9c6d7627c0cb35985bed2c3351d92b87d070d0088e5dc679e22f68e9c37cb0"} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc9c6d7627c0cb35985bed2c3351d92b87d070d0088e5dc679e22f68e9c37cb0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5"} {"level":"debug","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f"} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2"} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f"} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5"} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2"} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f3c58daa08d1e968177ae9ea509e3fb39f47c7648ddcfbecf192e4564175408","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f3c58daa08d1e968177ae9ea509e3fb39f47c7648ddcfbecf192e4564175408","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f3c58daa08d1e968177ae9ea509e3fb39f47c7648ddcfbecf192e4564175408"} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f3c58daa08d1e968177ae9ea509e3fb39f47c7648ddcfbecf192e4564175408","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f3c58daa08d1e968177ae9ea509e3fb39f47c7648ddcfbecf192e4564175408"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f"} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f3c58daa08d1e968177ae9ea509e3fb39f47c7648ddcfbecf192e4564175408","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f3c58daa08d1e968177ae9ea509e3fb39f47c7648ddcfbecf192e4564175408","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2"} {"level":"debug","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"862921337521d93f01d595c3e549b56b1279b17ec16d008439d1f0f88f779aaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f3c58daa08d1e968177ae9ea509e3fb39f47c7648ddcfbecf192e4564175408"} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"862921337521d93f01d595c3e549b56b1279b17ec16d008439d1f0f88f779aaa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2"} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"862921337521d93f01d595c3e549b56b1279b17ec16d008439d1f0f88f779aaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"862921337521d93f01d595c3e549b56b1279b17ec16d008439d1f0f88f779aaa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/862921337521d93f01d595c3e549b56b1279b17ec16d008439d1f0f88f779aaa"} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"862921337521d93f01d595c3e549b56b1279b17ec16d008439d1f0f88f779aaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["862921337521d93f01d595c3e549b56b1279b17ec16d008439d1f0f88f779aaa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2"} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"862921337521d93f01d595c3e549b56b1279b17ec16d008439d1f0f88f779aaa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"862921337521d93f01d595c3e549b56b1279b17ec16d008439d1f0f88f779aaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"862921337521d93f01d595c3e549b56b1279b17ec16d008439d1f0f88f779aaa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"862921337521d93f01d595c3e549b56b1279b17ec16d008439d1f0f88f779aaa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/862921337521d93f01d595c3e549b56b1279b17ec16d008439d1f0f88f779aaa"} {"level":"debug","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"862921337521d93f01d595c3e549b56b1279b17ec16d008439d1f0f88f779aaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["862921337521d93f01d595c3e549b56b1279b17ec16d008439d1f0f88f779aaa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"862921337521d93f01d595c3e549b56b1279b17ec16d008439d1f0f88f779aaa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5e5890dfb7159630b1d5b119ec80e979ae63655a0d9041da59476f82a64a1e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2"} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5e5890dfb7159630b1d5b119ec80e979ae63655a0d9041da59476f82a64a1e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"862921337521d93f01d595c3e549b56b1279b17ec16d008439d1f0f88f779aaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/862921337521d93f01d595c3e549b56b1279b17ec16d008439d1f0f88f779aaa"} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"862921337521d93f01d595c3e549b56b1279b17ec16d008439d1f0f88f779aaa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5e5890dfb7159630b1d5b119ec80e979ae63655a0d9041da59476f82a64a1e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5e5890dfb7159630b1d5b119ec80e979ae63655a0d9041da59476f82a64a1e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"862921337521d93f01d595c3e549b56b1279b17ec16d008439d1f0f88f779aaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["862921337521d93f01d595c3e549b56b1279b17ec16d008439d1f0f88f779aaa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5e5890dfb7159630b1d5b119ec80e979ae63655a0d9041da59476f82a64a1e2"} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"862921337521d93f01d595c3e549b56b1279b17ec16d008439d1f0f88f779aaa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5e5890dfb7159630b1d5b119ec80e979ae63655a0d9041da59476f82a64a1e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5e5890dfb7159630b1d5b119ec80e979ae63655a0d9041da59476f82a64a1e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/862921337521d93f01d595c3e549b56b1279b17ec16d008439d1f0f88f779aaa"} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5e5890dfb7159630b1d5b119ec80e979ae63655a0d9041da59476f82a64a1e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"862921337521d93f01d595c3e549b56b1279b17ec16d008439d1f0f88f779aaa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5e5890dfb7159630b1d5b119ec80e979ae63655a0d9041da59476f82a64a1e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5e5890dfb7159630b1d5b119ec80e979ae63655a0d9041da59476f82a64a1e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5e5890dfb7159630b1d5b119ec80e979ae63655a0d9041da59476f82a64a1e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa82da811ccc49a5463142b350da86c0b26745a5c299795730ff7e3fc4bd7223","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5e5890dfb7159630b1d5b119ec80e979ae63655a0d9041da59476f82a64a1e2"} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa82da811ccc49a5463142b350da86c0b26745a5c299795730ff7e3fc4bd7223","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5e5890dfb7159630b1d5b119ec80e979ae63655a0d9041da59476f82a64a1e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5e5890dfb7159630b1d5b119ec80e979ae63655a0d9041da59476f82a64a1e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5e5890dfb7159630b1d5b119ec80e979ae63655a0d9041da59476f82a64a1e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34698b12faef1290bddb911dad7b917557e4788005c9d7d2fd0169cd983e8312","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/862921337521d93f01d595c3e549b56b1279b17ec16d008439d1f0f88f779aaa"} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34698b12faef1290bddb911dad7b917557e4788005c9d7d2fd0169cd983e8312","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa82da811ccc49a5463142b350da86c0b26745a5c299795730ff7e3fc4bd7223","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa82da811ccc49a5463142b350da86c0b26745a5c299795730ff7e3fc4bd7223"} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5e5890dfb7159630b1d5b119ec80e979ae63655a0d9041da59476f82a64a1e2"} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa82da811ccc49a5463142b350da86c0b26745a5c299795730ff7e3fc4bd7223","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5e5890dfb7159630b1d5b119ec80e979ae63655a0d9041da59476f82a64a1e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34698b12faef1290bddb911dad7b917557e4788005c9d7d2fd0169cd983e8312","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34698b12faef1290bddb911dad7b917557e4788005c9d7d2fd0169cd983e8312"} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30"} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34698b12faef1290bddb911dad7b917557e4788005c9d7d2fd0169cd983e8312","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa82da811ccc49a5463142b350da86c0b26745a5c299795730ff7e3fc4bd7223"} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e"} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa82da811ccc49a5463142b350da86c0b26745a5c299795730ff7e3fc4bd7223","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa82da811ccc49a5463142b350da86c0b26745a5c299795730ff7e3fc4bd7223"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34698b12faef1290bddb911dad7b917557e4788005c9d7d2fd0169cd983e8312"} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30"} {"level":"info","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa82da811ccc49a5463142b350da86c0b26745a5c299795730ff7e3fc4bd7223","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:59:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:59:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa82da811ccc49a5463142b350da86c0b26745a5c299795730ff7e3fc4bd7223"} {"level":"info","ts":"2026-07-22T18:59:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34698b12faef1290bddb911dad7b917557e4788005c9d7d2fd0169cd983e8312","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:59:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:59:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34698b12faef1290bddb911dad7b917557e4788005c9d7d2fd0169cd983e8312"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:59:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4a29fe2337dd46e986e05c41c71e1b52998b5bdd0545e23144f2b8165960f92"} {"level":"info","ts":"2026-07-22T18:59:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e"} {"level":"info","ts":"2026-07-22T18:59:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34698b12faef1290bddb911dad7b917557e4788005c9d7d2fd0169cd983e8312","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa82da811ccc49a5463142b350da86c0b26745a5c299795730ff7e3fc4bd7223","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4a29fe2337dd46e986e05c41c71e1b52998b5bdd0545e23144f2b8165960f92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:59:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:59:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4a29fe2337dd46e986e05c41c71e1b52998b5bdd0545e23144f2b8165960f92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:59:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34698b12faef1290bddb911dad7b917557e4788005c9d7d2fd0169cd983e8312"} {"level":"info","ts":"2026-07-22T18:59:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4a29fe2337dd46e986e05c41c71e1b52998b5bdd0545e23144f2b8165960f92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34698b12faef1290bddb911dad7b917557e4788005c9d7d2fd0169cd983e8312","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4bd0d683c1007e0d4966b1182a6e3fd781ee253baa24c10893cd332cadbd0f09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T18:59:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T18:59:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:59:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4bd0d683c1007e0d4966b1182a6e3fd781ee253baa24c10893cd332cadbd0f09"} {"level":"info","ts":"2026-07-22T18:59:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14459015a1cba3f1062d85e532ed57cb9be0dd5a76e07f6ad16ccfe8b6d19ed1"} {"level":"info","ts":"2026-07-22T18:59:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4a29fe2337dd46e986e05c41c71e1b52998b5bdd0545e23144f2b8165960f92"} {"level":"info","ts":"2026-07-22T18:59:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4bd0d683c1007e0d4966b1182a6e3fd781ee253baa24c10893cd332cadbd0f09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14459015a1cba3f1062d85e532ed57cb9be0dd5a76e07f6ad16ccfe8b6d19ed1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:59:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:59:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14459015a1cba3f1062d85e532ed57cb9be0dd5a76e07f6ad16ccfe8b6d19ed1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:59:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04409f4c8d7a5320b73385380c67285517e6ae218ff5e4a08b2ea66864ceaf2a"} {"level":"info","ts":"2026-07-22T18:59:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4bd0d683c1007e0d4966b1182a6e3fd781ee253baa24c10893cd332cadbd0f09"} {"level":"info","ts":"2026-07-22T18:59:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14459015a1cba3f1062d85e532ed57cb9be0dd5a76e07f6ad16ccfe8b6d19ed1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4a29fe2337dd46e986e05c41c71e1b52998b5bdd0545e23144f2b8165960f92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04409f4c8d7a5320b73385380c67285517e6ae218ff5e4a08b2ea66864ceaf2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:59:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:59:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04409f4c8d7a5320b73385380c67285517e6ae218ff5e4a08b2ea66864ceaf2a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:59:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfa5de03cedab1d33de6d3a91306a50f27e628950714648fbccc2c2cc498ffd4"} {"level":"info","ts":"2026-07-22T18:59:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14459015a1cba3f1062d85e532ed57cb9be0dd5a76e07f6ad16ccfe8b6d19ed1"} {"level":"info","ts":"2026-07-22T18:59:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04409f4c8d7a5320b73385380c67285517e6ae218ff5e4a08b2ea66864ceaf2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4bd0d683c1007e0d4966b1182a6e3fd781ee253baa24c10893cd332cadbd0f09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:59:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:59:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4bd0d683c1007e0d4966b1182a6e3fd781ee253baa24c10893cd332cadbd0f09"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:59:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04409f4c8d7a5320b73385380c67285517e6ae218ff5e4a08b2ea66864ceaf2a"} {"level":"info","ts":"2026-07-22T18:59:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4bd0d683c1007e0d4966b1182a6e3fd781ee253baa24c10893cd332cadbd0f09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfa5de03cedab1d33de6d3a91306a50f27e628950714648fbccc2c2cc498ffd4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T18:59:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T18:59:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dfa5de03cedab1d33de6d3a91306a50f27e628950714648fbccc2c2cc498ffd4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T18:59:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4bd0d683c1007e0d4966b1182a6e3fd781ee253baa24c10893cd332cadbd0f09"} {"level":"info","ts":"2026-07-22T18:59:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfa5de03cedab1d33de6d3a91306a50f27e628950714648fbccc2c2cc498ffd4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14459015a1cba3f1062d85e532ed57cb9be0dd5a76e07f6ad16ccfe8b6d19ed1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04409f4c8d7a5320b73385380c67285517e6ae218ff5e4a08b2ea66864ceaf2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4bd0d683c1007e0d4966b1182a6e3fd781ee253baa24c10893cd332cadbd0f09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T18:59:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfa5de03cedab1d33de6d3a91306a50f27e628950714648fbccc2c2cc498ffd4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T18:59:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfa5de03cedab1d33de6d3a91306a50f27e628950714648fbccc2c2cc498ffd4"} {"level":"info","ts":"2026-07-22T18:59:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3ece5fb7-f164-409f-9aed-58a55d3dfb0c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:56976","PortSpecifier":{"PortValue":56976}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3ece5fb7-f164-409f-9aed-58a55d3dfb0c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T18:59:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3ece5fb7-f164-409f-9aed-58a55d3dfb0c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:56976","PortSpecifier":{"PortValue":56976}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784746780,"nanos":615346408},"http":{"id":"3ece5fb7-f164-409f-9aed-58a55d3dfb0c","method":"POST","headers":{":authority":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T18:59:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3ece5fb7-f164-409f-9aed-58a55d3dfb0c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T18:59:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3ece5fb7-f164-409f-9aed-58a55d3dfb0c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8ab0d4f6-f8f1-4cf4-9efe-fca7c4ab5850","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a401cdc-ebb5-4d31-80cd-b4a9f6027e30"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa1ce497e2e7"]}} {"level":"debug","ts":"2026-07-22T18:59:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3ece5fb7-f164-409f-9aed-58a55d3dfb0c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa1ce497e2e7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a401cdc-ebb5-4d31-80cd-b4a9f6027e30"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8ab0d4f6-f8f1-4cf4-9efe-fca7c4ab5850","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"34698b12faef1290bddb911dad7b917557e4788005c9d7d2fd0169cd983e8312"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T18:59:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ece5fb7-f164-409f-9aed-58a55d3dfb0c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T18:59:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ece5fb7-f164-409f-9aed-58a55d3dfb0c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T18:59:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ece5fb7-f164-409f-9aed-58a55d3dfb0c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d24283/sub-test-model-d24283\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d24283/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T18:59:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3ece5fb7-f164-409f-9aed-58a55d3dfb0c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T18:59:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ece5fb7-f164-409f-9aed-58a55d3dfb0c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T18:59:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ece5fb7-f164-409f-9aed-58a55d3dfb0c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T18:59:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3ece5fb7-f164-409f-9aed-58a55d3dfb0c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T18:59:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3ece5fb7-f164-409f-9aed-58a55d3dfb0c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T18:59:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"88c892b8-a10e-45d6-83c4-a98a2d617afe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:34146","PortSpecifier":{"PortValue":34146}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"88c892b8-a10e-45d6-83c4-a98a2d617afe","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-63c82d.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T18:59:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"88c892b8-a10e-45d6-83c4-a98a2d617afe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:34146","PortSpecifier":{"PortValue":34146}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784746780,"nanos":654590134},"http":{"id":"88c892b8-a10e-45d6-83c4-a98a2d617afe","method":"POST","headers":{":authority":"e2e-shared-b-63c82d.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T18:59:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"88c892b8-a10e-45d6-83c4-a98a2d617afe","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T18:59:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"88c892b8-a10e-45d6-83c4-a98a2d617afe","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8ab0d4f6-f8f1-4cf4-9efe-fca7c4ab5850","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a401cdc-ebb5-4d31-80cd-b4a9f6027e30"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa1ce497e2e7"]}} {"level":"debug","ts":"2026-07-22T18:59:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"88c892b8-a10e-45d6-83c4-a98a2d617afe","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa1ce497e2e7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a401cdc-ebb5-4d31-80cd-b4a9f6027e30"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8ab0d4f6-f8f1-4cf4-9efe-fca7c4ab5850","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-63c82d.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T18:59:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88c892b8-a10e-45d6-83c4-a98a2d617afe","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T18:59:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88c892b8-a10e-45d6-83c4-a98a2d617afe","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T18:59:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88c892b8-a10e-45d6-83c4-a98a2d617afe","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-63c82d/sub-test-model-63c82d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-63c82d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T18:59:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"88c892b8-a10e-45d6-83c4-a98a2d617afe","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T18:59:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88c892b8-a10e-45d6-83c4-a98a2d617afe","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T18:59:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88c892b8-a10e-45d6-83c4-a98a2d617afe","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T18:59:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"88c892b8-a10e-45d6-83c4-a98a2d617afe","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T18:59:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"88c892b8-a10e-45d6-83c4-a98a2d617afe","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T18:59:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b1253d9-c19f-4c3e-8fdf-42e02f3fd6d5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:56978","PortSpecifier":{"PortValue":56978}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2b1253d9-c19f-4c3e-8fdf-42e02f3fd6d5","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T18:59:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b1253d9-c19f-4c3e-8fdf-42e02f3fd6d5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:56978","PortSpecifier":{"PortValue":56978}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784746780,"nanos":691045747},"http":{"id":"2b1253d9-c19f-4c3e-8fdf-42e02f3fd6d5","method":"GET","headers":{":authority":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T18:59:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2b1253d9-c19f-4c3e-8fdf-42e02f3fd6d5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-14lhQgbiaPqgZ7GCb_nBt9cQZuO9zSDhCsFpxEOGIsSeo0F7S0on5ockIYbWQ"} {"level":"debug","ts":"2026-07-22T18:59:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2b1253d9-c19f-4c3e-8fdf-42e02f3fd6d5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-14lhQgbiaPqgZ7GCb_nBt9cQZuO9zSDhCsFpxEOGIsSeo0F7S0on5ockIYbWQ\"}"} {"level":"debug","ts":"2026-07-22T18:59:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2b1253d9-c19f-4c3e-8fdf-42e02f3fd6d5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"14b9ccb3-c2be-46b0-9566-081af37e264f","keyName":"e2e-sub-iso-01e433","subscription":"e2e-a-only-9c47f8","tenant":"e2e-shared-a-d24283","userId":"14b9ccb3-c2be-46b0-9566-081af37e264f","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T18:59:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2b1253d9-c19f-4c3e-8fdf-42e02f3fd6d5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T18:59:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b1253d9-c19f-4c3e-8fdf-42e02f3fd6d5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T18:59:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b1253d9-c19f-4c3e-8fdf-42e02f3fd6d5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T18:59:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b1253d9-c19f-4c3e-8fdf-42e02f3fd6d5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d24283/sub-test-model-d24283\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d24283/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T18:59:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2b1253d9-c19f-4c3e-8fdf-42e02f3fd6d5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-22T18:59:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b1253d9-c19f-4c3e-8fdf-42e02f3fd6d5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T18:59:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b1253d9-c19f-4c3e-8fdf-42e02f3fd6d5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-9c47f8"} {"level":"debug","ts":"2026-07-22T18:59:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b1253d9-c19f-4c3e-8fdf-42e02f3fd6d5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T18:59:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b1253d9-c19f-4c3e-8fdf-42e02f3fd6d5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T18:59:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b1253d9-c19f-4c3e-8fdf-42e02f3fd6d5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T18:59:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3f711196-8928-41fd-b225-6dfc4457a6f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:34160","PortSpecifier":{"PortValue":34160}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3f711196-8928-41fd-b225-6dfc4457a6f8","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-63c82d.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T18:59:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3f711196-8928-41fd-b225-6dfc4457a6f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:34160","PortSpecifier":{"PortValue":34160}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784746780,"nanos":720811053},"http":{"id":"3f711196-8928-41fd-b225-6dfc4457a6f8","method":"GET","headers":{":authority":"e2e-shared-b-63c82d.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T18:59:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3f711196-8928-41fd-b225-6dfc4457a6f8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1EcXLR7wvLwbg9uh2_FGT4OWMPwArTdnwiwjivJhKLi4g2XkzpEFd5T3IydDi"} {"level":"debug","ts":"2026-07-22T18:59:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3f711196-8928-41fd-b225-6dfc4457a6f8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-63c82d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1EcXLR7wvLwbg9uh2_FGT4OWMPwArTdnwiwjivJhKLi4g2XkzpEFd5T3IydDi\"}"} {"level":"debug","ts":"2026-07-22T18:59:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3f711196-8928-41fd-b225-6dfc4457a6f8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-63c82d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6a925685-e03b-44c0-94f4-7c5ab7edbac3","keyName":"e2e-sub-iso-e6594b","subscription":"e2e-b-only-9c47f8","tenant":"e2e-shared-b-63c82d","userId":"6a925685-e03b-44c0-94f4-7c5ab7edbac3","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T18:59:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3f711196-8928-41fd-b225-6dfc4457a6f8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T18:59:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f711196-8928-41fd-b225-6dfc4457a6f8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T18:59:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f711196-8928-41fd-b225-6dfc4457a6f8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T18:59:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f711196-8928-41fd-b225-6dfc4457a6f8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-63c82d/sub-test-model-63c82d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-63c82d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T18:59:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3f711196-8928-41fd-b225-6dfc4457a6f8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-22T18:59:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f711196-8928-41fd-b225-6dfc4457a6f8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T18:59:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f711196-8928-41fd-b225-6dfc4457a6f8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-9c47f8"} {"level":"debug","ts":"2026-07-22T18:59:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f711196-8928-41fd-b225-6dfc4457a6f8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T18:59:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3f711196-8928-41fd-b225-6dfc4457a6f8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T18:59:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3f711196-8928-41fd-b225-6dfc4457a6f8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T18:59:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d31a421e-5d72-45e7-9bbb-98ae1ceabe3f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:38180","PortSpecifier":{"PortValue":38180}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d31a421e-5d72-45e7-9bbb-98ae1ceabe3f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T18:59:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d31a421e-5d72-45e7-9bbb-98ae1ceabe3f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:38180","PortSpecifier":{"PortValue":38180}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784746790,"nanos":790795681},"http":{"id":"d31a421e-5d72-45e7-9bbb-98ae1ceabe3f","method":"POST","headers":{":authority":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T18:59:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d31a421e-5d72-45e7-9bbb-98ae1ceabe3f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T18:59:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d31a421e-5d72-45e7-9bbb-98ae1ceabe3f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8ab0d4f6-f8f1-4cf4-9efe-fca7c4ab5850","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a401cdc-ebb5-4d31-80cd-b4a9f6027e30"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa1ce497e2e7"]}} {"level":"debug","ts":"2026-07-22T18:59:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d31a421e-5d72-45e7-9bbb-98ae1ceabe3f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa1ce497e2e7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a401cdc-ebb5-4d31-80cd-b4a9f6027e30"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8ab0d4f6-f8f1-4cf4-9efe-fca7c4ab5850","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"34698b12faef1290bddb911dad7b917557e4788005c9d7d2fd0169cd983e8312"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T18:59:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d31a421e-5d72-45e7-9bbb-98ae1ceabe3f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T18:59:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d31a421e-5d72-45e7-9bbb-98ae1ceabe3f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T18:59:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d31a421e-5d72-45e7-9bbb-98ae1ceabe3f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d24283/sub-test-model-d24283\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d24283/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T18:59:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d31a421e-5d72-45e7-9bbb-98ae1ceabe3f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T18:59:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d31a421e-5d72-45e7-9bbb-98ae1ceabe3f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T18:59:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d31a421e-5d72-45e7-9bbb-98ae1ceabe3f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-22T18:59:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d31a421e-5d72-45e7-9bbb-98ae1ceabe3f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T18:59:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d31a421e-5d72-45e7-9bbb-98ae1ceabe3f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T18:59:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a1837a17-5818-44df-b143-2d24dec38d60","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:34696","PortSpecifier":{"PortValue":34696}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a1837a17-5818-44df-b143-2d24dec38d60","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-63c82d.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T18:59:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a1837a17-5818-44df-b143-2d24dec38d60","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:34696","PortSpecifier":{"PortValue":34696}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784746790,"nanos":830682851},"http":{"id":"a1837a17-5818-44df-b143-2d24dec38d60","method":"POST","headers":{":authority":"e2e-shared-b-63c82d.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T18:59:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a1837a17-5818-44df-b143-2d24dec38d60","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T18:59:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a1837a17-5818-44df-b143-2d24dec38d60","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8ab0d4f6-f8f1-4cf4-9efe-fca7c4ab5850","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a401cdc-ebb5-4d31-80cd-b4a9f6027e30"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa1ce497e2e7"]}} {"level":"debug","ts":"2026-07-22T18:59:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a1837a17-5818-44df-b143-2d24dec38d60","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa1ce497e2e7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a401cdc-ebb5-4d31-80cd-b4a9f6027e30"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8ab0d4f6-f8f1-4cf4-9efe-fca7c4ab5850","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-63c82d.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T18:59:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1837a17-5818-44df-b143-2d24dec38d60","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T18:59:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1837a17-5818-44df-b143-2d24dec38d60","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T18:59:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1837a17-5818-44df-b143-2d24dec38d60","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-63c82d/sub-test-model-63c82d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-63c82d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T18:59:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a1837a17-5818-44df-b143-2d24dec38d60","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T18:59:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a1837a17-5818-44df-b143-2d24dec38d60","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T18:59:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a1837a17-5818-44df-b143-2d24dec38d60","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T18:59:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a1837a17-5818-44df-b143-2d24dec38d60","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T18:59:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a1837a17-5818-44df-b143-2d24dec38d60","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T18:59:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e25ec92f-f0c1-44fe-b6c1-94134f8a1e0f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:38196","PortSpecifier":{"PortValue":38196}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e25ec92f-f0c1-44fe-b6c1-94134f8a1e0f","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T18:59:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e25ec92f-f0c1-44fe-b6c1-94134f8a1e0f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:38196","PortSpecifier":{"PortValue":38196}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784746790,"nanos":871223763},"http":{"id":"e25ec92f-f0c1-44fe-b6c1-94134f8a1e0f","method":"POST","headers":{":authority":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T18:59:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e25ec92f-f0c1-44fe-b6c1-94134f8a1e0f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-31svBSKfNP5b2LIi_V7Cd4YqNtKrz5EjIuub16i5HgAB223dud1wLL6kFjW7"} {"level":"debug","ts":"2026-07-22T18:59:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e25ec92f-f0c1-44fe-b6c1-94134f8a1e0f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-31svBSKfNP5b2LIi_V7Cd4YqNtKrz5EjIuub16i5HgAB223dud1wLL6kFjW7\"}"} {"level":"debug","ts":"2026-07-22T18:59:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e25ec92f-f0c1-44fe-b6c1-94134f8a1e0f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"bd6c1df4-9c1a-4324-9ed7-daf16bfbed7a","keyName":"e2e-sub-iso-aa4e88","subscription":"e2e-shared-sub-7869f1","tenant":"e2e-shared-a-d24283","userId":"bd6c1df4-9c1a-4324-9ed7-daf16bfbed7a","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T18:59:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e25ec92f-f0c1-44fe-b6c1-94134f8a1e0f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T18:59:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e25ec92f-f0c1-44fe-b6c1-94134f8a1e0f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T18:59:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e25ec92f-f0c1-44fe-b6c1-94134f8a1e0f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T18:59:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e25ec92f-f0c1-44fe-b6c1-94134f8a1e0f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d24283/sub-test-model-d24283\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d24283/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T18:59:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e25ec92f-f0c1-44fe-b6c1-94134f8a1e0f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-22T18:59:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e25ec92f-f0c1-44fe-b6c1-94134f8a1e0f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-7869f1"} {"level":"debug","ts":"2026-07-22T18:59:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e25ec92f-f0c1-44fe-b6c1-94134f8a1e0f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T18:59:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e25ec92f-f0c1-44fe-b6c1-94134f8a1e0f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-22T18:59:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e25ec92f-f0c1-44fe-b6c1-94134f8a1e0f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T18:59:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e25ec92f-f0c1-44fe-b6c1-94134f8a1e0f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T18:59:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0fc6b0a0-cf7f-48fd-944a-1aab0502f6ad","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:34702","PortSpecifier":{"PortValue":34702}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0fc6b0a0-cf7f-48fd-944a-1aab0502f6ad","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-63c82d.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T18:59:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0fc6b0a0-cf7f-48fd-944a-1aab0502f6ad","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:34702","PortSpecifier":{"PortValue":34702}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784746790,"nanos":905588837},"http":{"id":"0fc6b0a0-cf7f-48fd-944a-1aab0502f6ad","method":"POST","headers":{":authority":"e2e-shared-b-63c82d.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T18:59:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0fc6b0a0-cf7f-48fd-944a-1aab0502f6ad","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-bTzpmQBgjgJxPrwm_BBgco9IfhRWkJBJreiDA5ufDUyZTP5hST2cD2pk11Lk"} {"level":"debug","ts":"2026-07-22T18:59:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0fc6b0a0-cf7f-48fd-944a-1aab0502f6ad","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-63c82d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-bTzpmQBgjgJxPrwm_BBgco9IfhRWkJBJreiDA5ufDUyZTP5hST2cD2pk11Lk\"}"} {"level":"debug","ts":"2026-07-22T18:59:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0fc6b0a0-cf7f-48fd-944a-1aab0502f6ad","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-63c82d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2bb2bbc6-9767-450f-83ad-a7d873983c99","keyName":"e2e-sub-iso-1a0adc","subscription":"e2e-shared-sub-7869f1","tenant":"e2e-shared-b-63c82d","userId":"2bb2bbc6-9767-450f-83ad-a7d873983c99","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T18:59:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0fc6b0a0-cf7f-48fd-944a-1aab0502f6ad","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T18:59:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0fc6b0a0-cf7f-48fd-944a-1aab0502f6ad","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T18:59:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0fc6b0a0-cf7f-48fd-944a-1aab0502f6ad","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T18:59:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0fc6b0a0-cf7f-48fd-944a-1aab0502f6ad","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-63c82d/sub-test-model-63c82d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-63c82d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T18:59:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0fc6b0a0-cf7f-48fd-944a-1aab0502f6ad","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-7869f1"} {"level":"debug","ts":"2026-07-22T18:59:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0fc6b0a0-cf7f-48fd-944a-1aab0502f6ad","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T18:59:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0fc6b0a0-cf7f-48fd-944a-1aab0502f6ad","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T18:59:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0fc6b0a0-cf7f-48fd-944a-1aab0502f6ad","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-22T18:59:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0fc6b0a0-cf7f-48fd-944a-1aab0502f6ad","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T18:59:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0fc6b0a0-cf7f-48fd-944a-1aab0502f6ad","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T18:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/04409f4c8d7a5320b73385380c67285517e6ae218ff5e4a08b2ea66864ceaf2a"} {"level":"info","ts":"2026-07-22T18:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dfa5de03cedab1d33de6d3a91306a50f27e628950714648fbccc2c2cc498ffd4"} {"level":"info","ts":"2026-07-22T18:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e"} {"level":"info","ts":"2026-07-22T18:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d5e5890dfb7159630b1d5b119ec80e979ae63655a0d9041da59476f82a64a1e2"} {"level":"info","ts":"2026-07-22T18:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/862921337521d93f01d595c3e549b56b1279b17ec16d008439d1f0f88f779aaa"} {"level":"info","ts":"2026-07-22T18:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aa82da811ccc49a5463142b350da86c0b26745a5c299795730ff7e3fc4bd7223"} {"level":"info","ts":"2026-07-22T18:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5"} {"level":"info","ts":"2026-07-22T18:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f"} {"level":"info","ts":"2026-07-22T18:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2a390b175bdb13266e1224d3b5d0c5b8f847c0590bc5857128c010b54b792d5c"} {"level":"info","ts":"2026-07-22T18:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/14459015a1cba3f1062d85e532ed57cb9be0dd5a76e07f6ad16ccfe8b6d19ed1"} {"level":"info","ts":"2026-07-22T18:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4de286b2eb9f5198b1a1c76a0b3d57676a74122ba41600973ab51292952f7374"} {"level":"info","ts":"2026-07-22T18:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/99be737191290f7c85b0fc489bf17b386bd0b0576e3a45ecb9fbb1d8f0f758f8"} {"level":"info","ts":"2026-07-22T18:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4bd0d683c1007e0d4966b1182a6e3fd781ee253baa24c10893cd332cadbd0f09"} {"level":"info","ts":"2026-07-22T18:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8615d031ee83aec6d2c04c3d2fa836e190bc5cc87a789538d3f6bc5d1c17d2be"} {"level":"info","ts":"2026-07-22T18:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/34698b12faef1290bddb911dad7b917557e4788005c9d7d2fd0169cd983e8312"} {"level":"info","ts":"2026-07-22T18:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/97ee6bdbf11c7a5133c15fd692e1df3363057c7bcf533933b019400fd02a81f0"} {"level":"info","ts":"2026-07-22T18:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30"} {"level":"info","ts":"2026-07-22T18:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e4a29fe2337dd46e986e05c41c71e1b52998b5bdd0545e23144f2b8165960f92"} {"level":"info","ts":"2026-07-22T18:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/67fabad04e87625522f31a2f25123ffa8b0422322c9cb272f54a4c5718f1aa80"} {"level":"info","ts":"2026-07-22T18:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3551057120833557921485ff857926ec32a624d0b7a58520240ac30d1224b705"} {"level":"info","ts":"2026-07-22T18:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2"} {"level":"info","ts":"2026-07-22T18:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2f3c58daa08d1e968177ae9ea509e3fb39f47c7648ddcfbecf192e4564175408"} {"level":"info","ts":"2026-07-22T18:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b11acb42d245cfdcbfcf56991548d6f36ad0b7644341f19876fd41397f72082b"} {"level":"info","ts":"2026-07-22T18:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fc9c6d7627c0cb35985bed2c3351d92b87d070d0088e5dc679e22f68e9c37cb0"} {"level":"debug","ts":"2026-07-22T19:00:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:00:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:00:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:00:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30"} {"level":"debug","ts":"2026-07-22T19:00:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:00:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30"} {"level":"debug","ts":"2026-07-22T19:00:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:00:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30"} {"level":"debug","ts":"2026-07-22T19:00:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:00:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:00:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:00:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f"} {"level":"debug","ts":"2026-07-22T19:00:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:00:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f"} {"level":"debug","ts":"2026-07-22T19:00:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:00:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:00:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:00:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f"} {"level":"debug","ts":"2026-07-22T19:00:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:00:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f"} {"level":"debug","ts":"2026-07-22T19:00:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:00:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:00:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:00:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f"} {"level":"debug","ts":"2026-07-22T19:00:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:00:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f"} {"level":"debug","ts":"2026-07-22T19:00:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:00:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:00:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f"} {"level":"info","ts":"2026-07-22T19:00:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:00:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:00:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f"} {"level":"info","ts":"2026-07-22T19:00:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e"} {"level":"info","ts":"2026-07-22T19:00:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:00:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:00:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e"} {"level":"info","ts":"2026-07-22T19:00:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:00:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:00:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f"} {"level":"info","ts":"2026-07-22T19:00:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e"} {"level":"info","ts":"2026-07-22T19:00:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:00:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:00:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f"} {"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e"} {"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ef9420d02b9dcaff93c018a231cb847de6ba9960c665c3090c452ae988e7742","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f"} {"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ef9420d02b9dcaff93c018a231cb847de6ba9960c665c3090c452ae988e7742","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ef9420d02b9dcaff93c018a231cb847de6ba9960c665c3090c452ae988e7742","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ef9420d02b9dcaff93c018a231cb847de6ba9960c665c3090c452ae988e7742"} {"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ef9420d02b9dcaff93c018a231cb847de6ba9960c665c3090c452ae988e7742","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ef9420d02b9dcaff93c018a231cb847de6ba9960c665c3090c452ae988e7742","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ef9420d02b9dcaff93c018a231cb847de6ba9960c665c3090c452ae988e7742"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0ef9420d02b9dcaff93c018a231cb847de6ba9960c665c3090c452ae988e7742","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0ef9420d02b9dcaff93c018a231cb847de6ba9960c665c3090c452ae988e7742\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ef9420d02b9dcaff93c018a231cb847de6ba9960c665c3090c452ae988e7742","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ef9420d02b9dcaff93c018a231cb847de6ba9960c665c3090c452ae988e7742"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f"} {"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ef9420d02b9dcaff93c018a231cb847de6ba9960c665c3090c452ae988e7742","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ef9420d02b9dcaff93c018a231cb847de6ba9960c665c3090c452ae988e7742","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ef9420d02b9dcaff93c018a231cb847de6ba9960c665c3090c452ae988e7742","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ef9420d02b9dcaff93c018a231cb847de6ba9960c665c3090c452ae988e7742"} {"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ef9420d02b9dcaff93c018a231cb847de6ba9960c665c3090c452ae988e7742","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ef9420d02b9dcaff93c018a231cb847de6ba9960c665c3090c452ae988e7742","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ef9420d02b9dcaff93c018a231cb847de6ba9960c665c3090c452ae988e7742"} {"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"020e1eed36392bd59e06b9413046bbf82a8c72f01a1341a796b42294bb637912","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"020e1eed36392bd59e06b9413046bbf82a8c72f01a1341a796b42294bb637912","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ef9420d02b9dcaff93c018a231cb847de6ba9960c665c3090c452ae988e7742","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ef9420d02b9dcaff93c018a231cb847de6ba9960c665c3090c452ae988e7742"} {"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"020e1eed36392bd59e06b9413046bbf82a8c72f01a1341a796b42294bb637912","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"020e1eed36392bd59e06b9413046bbf82a8c72f01a1341a796b42294bb637912","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"020e1eed36392bd59e06b9413046bbf82a8c72f01a1341a796b42294bb637912","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/020e1eed36392bd59e06b9413046bbf82a8c72f01a1341a796b42294bb637912"} {"level":"error","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"020e1eed36392bd59e06b9413046bbf82a8c72f01a1341a796b42294bb637912","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"020e1eed36392bd59e06b9413046bbf82a8c72f01a1341a796b42294bb637912\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"020e1eed36392bd59e06b9413046bbf82a8c72f01a1341a796b42294bb637912","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/020e1eed36392bd59e06b9413046bbf82a8c72f01a1341a796b42294bb637912"} {"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ef9420d02b9dcaff93c018a231cb847de6ba9960c665c3090c452ae988e7742","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ef9420d02b9dcaff93c018a231cb847de6ba9960c665c3090c452ae988e7742"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ef9420d02b9dcaff93c018a231cb847de6ba9960c665c3090c452ae988e7742","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"020e1eed36392bd59e06b9413046bbf82a8c72f01a1341a796b42294bb637912","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["020e1eed36392bd59e06b9413046bbf82a8c72f01a1341a796b42294bb637912"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"020e1eed36392bd59e06b9413046bbf82a8c72f01a1341a796b42294bb637912","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ef9420d02b9dcaff93c018a231cb847de6ba9960c665c3090c452ae988e7742","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ef9420d02b9dcaff93c018a231cb847de6ba9960c665c3090c452ae988e7742"} {"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ef9420d02b9dcaff93c018a231cb847de6ba9960c665c3090c452ae988e7742","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"020e1eed36392bd59e06b9413046bbf82a8c72f01a1341a796b42294bb637912","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/020e1eed36392bd59e06b9413046bbf82a8c72f01a1341a796b42294bb637912"} {"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"020e1eed36392bd59e06b9413046bbf82a8c72f01a1341a796b42294bb637912","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5e5890dfb7159630b1d5b119ec80e979ae63655a0d9041da59476f82a64a1e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5e5890dfb7159630b1d5b119ec80e979ae63655a0d9041da59476f82a64a1e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ef9420d02b9dcaff93c018a231cb847de6ba9960c665c3090c452ae988e7742","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ef9420d02b9dcaff93c018a231cb847de6ba9960c665c3090c452ae988e7742"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5e5890dfb7159630b1d5b119ec80e979ae63655a0d9041da59476f82a64a1e2"} {"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ef9420d02b9dcaff93c018a231cb847de6ba9960c665c3090c452ae988e7742","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"020e1eed36392bd59e06b9413046bbf82a8c72f01a1341a796b42294bb637912","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["020e1eed36392bd59e06b9413046bbf82a8c72f01a1341a796b42294bb637912"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ef9420d02b9dcaff93c018a231cb847de6ba9960c665c3090c452ae988e7742"} {"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"020e1eed36392bd59e06b9413046bbf82a8c72f01a1341a796b42294bb637912","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5e5890dfb7159630b1d5b119ec80e979ae63655a0d9041da59476f82a64a1e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5e5890dfb7159630b1d5b119ec80e979ae63655a0d9041da59476f82a64a1e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5e5890dfb7159630b1d5b119ec80e979ae63655a0d9041da59476f82a64a1e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ef9420d02b9dcaff93c018a231cb847de6ba9960c665c3090c452ae988e7742","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"020e1eed36392bd59e06b9413046bbf82a8c72f01a1341a796b42294bb637912","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/020e1eed36392bd59e06b9413046bbf82a8c72f01a1341a796b42294bb637912"} {"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"020e1eed36392bd59e06b9413046bbf82a8c72f01a1341a796b42294bb637912","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5e5890dfb7159630b1d5b119ec80e979ae63655a0d9041da59476f82a64a1e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5e5890dfb7159630b1d5b119ec80e979ae63655a0d9041da59476f82a64a1e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"020e1eed36392bd59e06b9413046bbf82a8c72f01a1341a796b42294bb637912","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["020e1eed36392bd59e06b9413046bbf82a8c72f01a1341a796b42294bb637912"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5e5890dfb7159630b1d5b119ec80e979ae63655a0d9041da59476f82a64a1e2"} {"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"020e1eed36392bd59e06b9413046bbf82a8c72f01a1341a796b42294bb637912","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1a37c8ffaed4ad487dc97785214553724bc0ab32185412fb7703160b0ed9e74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ef9420d02b9dcaff93c018a231cb847de6ba9960c665c3090c452ae988e7742"} {"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1a37c8ffaed4ad487dc97785214553724bc0ab32185412fb7703160b0ed9e74","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5e5890dfb7159630b1d5b119ec80e979ae63655a0d9041da59476f82a64a1e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5e5890dfb7159630b1d5b119ec80e979ae63655a0d9041da59476f82a64a1e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5e5890dfb7159630b1d5b119ec80e979ae63655a0d9041da59476f82a64a1e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"020e1eed36392bd59e06b9413046bbf82a8c72f01a1341a796b42294bb637912","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/020e1eed36392bd59e06b9413046bbf82a8c72f01a1341a796b42294bb637912"} {"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"020e1eed36392bd59e06b9413046bbf82a8c72f01a1341a796b42294bb637912","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1a37c8ffaed4ad487dc97785214553724bc0ab32185412fb7703160b0ed9e74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1a37c8ffaed4ad487dc97785214553724bc0ab32185412fb7703160b0ed9e74"} {"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1a37c8ffaed4ad487dc97785214553724bc0ab32185412fb7703160b0ed9e74","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5e5890dfb7159630b1d5b119ec80e979ae63655a0d9041da59476f82a64a1e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5e5890dfb7159630b1d5b119ec80e979ae63655a0d9041da59476f82a64a1e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"020e1eed36392bd59e06b9413046bbf82a8c72f01a1341a796b42294bb637912","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["020e1eed36392bd59e06b9413046bbf82a8c72f01a1341a796b42294bb637912"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5e5890dfb7159630b1d5b119ec80e979ae63655a0d9041da59476f82a64a1e2"} {"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"020e1eed36392bd59e06b9413046bbf82a8c72f01a1341a796b42294bb637912","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1a37c8ffaed4ad487dc97785214553724bc0ab32185412fb7703160b0ed9e74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1a37c8ffaed4ad487dc97785214553724bc0ab32185412fb7703160b0ed9e74"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/020e1eed36392bd59e06b9413046bbf82a8c72f01a1341a796b42294bb637912"} {"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1a37c8ffaed4ad487dc97785214553724bc0ab32185412fb7703160b0ed9e74","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5e5890dfb7159630b1d5b119ec80e979ae63655a0d9041da59476f82a64a1e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5e5890dfb7159630b1d5b119ec80e979ae63655a0d9041da59476f82a64a1e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5e5890dfb7159630b1d5b119ec80e979ae63655a0d9041da59476f82a64a1e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"020e1eed36392bd59e06b9413046bbf82a8c72f01a1341a796b42294bb637912","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1a37c8ffaed4ad487dc97785214553724bc0ab32185412fb7703160b0ed9e74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1a37c8ffaed4ad487dc97785214553724bc0ab32185412fb7703160b0ed9e74"} {"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1a37c8ffaed4ad487dc97785214553724bc0ab32185412fb7703160b0ed9e74","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5e5890dfb7159630b1d5b119ec80e979ae63655a0d9041da59476f82a64a1e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5e5890dfb7159630b1d5b119ec80e979ae63655a0d9041da59476f82a64a1e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1a37c8ffaed4ad487dc97785214553724bc0ab32185412fb7703160b0ed9e74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1a37c8ffaed4ad487dc97785214553724bc0ab32185412fb7703160b0ed9e74"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5e5890dfb7159630b1d5b119ec80e979ae63655a0d9041da59476f82a64a1e2"} {"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1a37c8ffaed4ad487dc97785214553724bc0ab32185412fb7703160b0ed9e74","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5e5890dfb7159630b1d5b119ec80e979ae63655a0d9041da59476f82a64a1e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5e5890dfb7159630b1d5b119ec80e979ae63655a0d9041da59476f82a64a1e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/020e1eed36392bd59e06b9413046bbf82a8c72f01a1341a796b42294bb637912"} {"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5e5890dfb7159630b1d5b119ec80e979ae63655a0d9041da59476f82a64a1e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1a37c8ffaed4ad487dc97785214553724bc0ab32185412fb7703160b0ed9e74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1a37c8ffaed4ad487dc97785214553724bc0ab32185412fb7703160b0ed9e74","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5e5890dfb7159630b1d5b119ec80e979ae63655a0d9041da59476f82a64a1e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1a37c8ffaed4ad487dc97785214553724bc0ab32185412fb7703160b0ed9e74","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1a37c8ffaed4ad487dc97785214553724bc0ab32185412fb7703160b0ed9e74"} {"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1a37c8ffaed4ad487dc97785214553724bc0ab32185412fb7703160b0ed9e74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1a37c8ffaed4ad487dc97785214553724bc0ab32185412fb7703160b0ed9e74"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1a37c8ffaed4ad487dc97785214553724bc0ab32185412fb7703160b0ed9e74","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1a37c8ffaed4ad487dc97785214553724bc0ab32185412fb7703160b0ed9e74","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5e5890dfb7159630b1d5b119ec80e979ae63655a0d9041da59476f82a64a1e2"} {"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1a37c8ffaed4ad487dc97785214553724bc0ab32185412fb7703160b0ed9e74"} {"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30f5546b881c5125883b88b5554db6acb93c20c1d20cd199634c4b5f186f9738","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30f5546b881c5125883b88b5554db6acb93c20c1d20cd199634c4b5f186f9738","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30f5546b881c5125883b88b5554db6acb93c20c1d20cd199634c4b5f186f9738","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30f5546b881c5125883b88b5554db6acb93c20c1d20cd199634c4b5f186f9738"} {"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30f5546b881c5125883b88b5554db6acb93c20c1d20cd199634c4b5f186f9738","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30f5546b881c5125883b88b5554db6acb93c20c1d20cd199634c4b5f186f9738","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30f5546b881c5125883b88b5554db6acb93c20c1d20cd199634c4b5f186f9738","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30f5546b881c5125883b88b5554db6acb93c20c1d20cd199634c4b5f186f9738"} {"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30f5546b881c5125883b88b5554db6acb93c20c1d20cd199634c4b5f186f9738"} {"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30f5546b881c5125883b88b5554db6acb93c20c1d20cd199634c4b5f186f9738","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30f5546b881c5125883b88b5554db6acb93c20c1d20cd199634c4b5f186f9738"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30f5546b881c5125883b88b5554db6acb93c20c1d20cd199634c4b5f186f9738","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30f5546b881c5125883b88b5554db6acb93c20c1d20cd199634c4b5f186f9738","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"098b7410556592b63443936cd10f355ed2e04351afaaf2da40d2fda4cb84177f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30f5546b881c5125883b88b5554db6acb93c20c1d20cd199634c4b5f186f9738"} {"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"098b7410556592b63443936cd10f355ed2e04351afaaf2da40d2fda4cb84177f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"883d27d518918087febe513041ddf5ceb5dbb0f5d697917ad2f02be90c1cf04c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/098b7410556592b63443936cd10f355ed2e04351afaaf2da40d2fda4cb84177f"} {"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"883d27d518918087febe513041ddf5ceb5dbb0f5d697917ad2f02be90c1cf04c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"098b7410556592b63443936cd10f355ed2e04351afaaf2da40d2fda4cb84177f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["098b7410556592b63443936cd10f355ed2e04351afaaf2da40d2fda4cb84177f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/883d27d518918087febe513041ddf5ceb5dbb0f5d697917ad2f02be90c1cf04c"} {"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"098b7410556592b63443936cd10f355ed2e04351afaaf2da40d2fda4cb84177f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34698b12faef1290bddb911dad7b917557e4788005c9d7d2fd0169cd983e8312","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34698b12faef1290bddb911dad7b917557e4788005c9d7d2fd0169cd983e8312"} {"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2c4bcc2780c5bbb6c9e1204dfe8de7e1945e786128a8695941fecef227f85ff"} {"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/098b7410556592b63443936cd10f355ed2e04351afaaf2da40d2fda4cb84177f"} {"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34698b12faef1290bddb911dad7b917557e4788005c9d7d2fd0169cd983e8312","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2c4bcc2780c5bbb6c9e1204dfe8de7e1945e786128a8695941fecef227f85ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b2c4bcc2780c5bbb6c9e1204dfe8de7e1945e786128a8695941fecef227f85ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2142a98e52c50ee1477a8369869712feae046acd120894abf318317da192230"} {"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/883d27d518918087febe513041ddf5ceb5dbb0f5d697917ad2f02be90c1cf04c"} {"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2c4bcc2780c5bbb6c9e1204dfe8de7e1945e786128a8695941fecef227f85ff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"883d27d518918087febe513041ddf5ceb5dbb0f5d697917ad2f02be90c1cf04c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["883d27d518918087febe513041ddf5ceb5dbb0f5d697917ad2f02be90c1cf04c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf4d658d37ff58ac9bff0d5427f1f2b0def63c331acea7004adece2d94445edd"} {"level":"info","ts":"2026-07-22T19:00:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/938884675cc188f73fc88a3e60f51c03389f8d34ab84f8aba8175ab4ce0c4885"} {"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34698b12faef1290bddb911dad7b917557e4788005c9d7d2fd0169cd983e8312"} {"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"883d27d518918087febe513041ddf5ceb5dbb0f5d697917ad2f02be90c1cf04c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2142a98e52c50ee1477a8369869712feae046acd120894abf318317da192230","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2142a98e52c50ee1477a8369869712feae046acd120894abf318317da192230"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61146a5c7f89b4f78353ecaf079f2c7f3cd1f0a8d4131b70c302d963120e7b94"} {"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59a19c8f99c1a269ecb83fe6b3335aef9373b0bc56010a94d3be360165e46c4e"} {"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2142a98e52c50ee1477a8369869712feae046acd120894abf318317da192230","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf4d658d37ff58ac9bff0d5427f1f2b0def63c331acea7004adece2d94445edd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf4d658d37ff58ac9bff0d5427f1f2b0def63c331acea7004adece2d94445edd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2c4bcc2780c5bbb6c9e1204dfe8de7e1945e786128a8695941fecef227f85ff"} {"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47a83603029de7d85c42f002265b69f15c6a06de02d75eac38595480815ffc72"} {"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf4d658d37ff58ac9bff0d5427f1f2b0def63c331acea7004adece2d94445edd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"098b7410556592b63443936cd10f355ed2e04351afaaf2da40d2fda4cb84177f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"938884675cc188f73fc88a3e60f51c03389f8d34ab84f8aba8175ab4ce0c4885","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["938884675cc188f73fc88a3e60f51c03389f8d34ab84f8aba8175ab4ce0c4885"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8eff71d33ca3ca73f0a314aa02926cfae15fbb6d05a3ba1f134f24f881900f24"} {"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/883d27d518918087febe513041ddf5ceb5dbb0f5d697917ad2f02be90c1cf04c"} {"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc3f55ffabf2bd121716902591e32e8913c688decbc8dfe27543ba7304fc7305"} {"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"938884675cc188f73fc88a3e60f51c03389f8d34ab84f8aba8175ab4ce0c4885","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34698b12faef1290bddb911dad7b917557e4788005c9d7d2fd0169cd983e8312","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34698b12faef1290bddb911dad7b917557e4788005c9d7d2fd0169cd983e8312"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa7a9812b19399b58e105c39a5b9fb00e9ec8fdc30dd520fffc46f3450631f21"} {"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2142a98e52c50ee1477a8369869712feae046acd120894abf318317da192230"} {"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34698b12faef1290bddb911dad7b917557e4788005c9d7d2fd0169cd983e8312","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61146a5c7f89b4f78353ecaf079f2c7f3cd1f0a8d4131b70c302d963120e7b94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["61146a5c7f89b4f78353ecaf079f2c7f3cd1f0a8d4131b70c302d963120e7b94"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b11acb42d245cfdcbfcf56991548d6f36ad0b7644341f19876fd41397f72082b"} {"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5"} {"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2"} {"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61146a5c7f89b4f78353ecaf079f2c7f3cd1f0a8d4131b70c302d963120e7b94","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59a19c8f99c1a269ecb83fe6b3335aef9373b0bc56010a94d3be360165e46c4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["59a19c8f99c1a269ecb83fe6b3335aef9373b0bc56010a94d3be360165e46c4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf4d658d37ff58ac9bff0d5427f1f2b0def63c331acea7004adece2d94445edd"} {"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/938884675cc188f73fc88a3e60f51c03389f8d34ab84f8aba8175ab4ce0c4885"} {"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59a19c8f99c1a269ecb83fe6b3335aef9373b0bc56010a94d3be360165e46c4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2c4bcc2780c5bbb6c9e1204dfe8de7e1945e786128a8695941fecef227f85ff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47a83603029de7d85c42f002265b69f15c6a06de02d75eac38595480815ffc72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["47a83603029de7d85c42f002265b69f15c6a06de02d75eac38595480815ffc72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34698b12faef1290bddb911dad7b917557e4788005c9d7d2fd0169cd983e8312"} {"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61146a5c7f89b4f78353ecaf079f2c7f3cd1f0a8d4131b70c302d963120e7b94"} {"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59a19c8f99c1a269ecb83fe6b3335aef9373b0bc56010a94d3be360165e46c4e"} {"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47a83603029de7d85c42f002265b69f15c6a06de02d75eac38595480815ffc72","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8eff71d33ca3ca73f0a314aa02926cfae15fbb6d05a3ba1f134f24f881900f24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8eff71d33ca3ca73f0a314aa02926cfae15fbb6d05a3ba1f134f24f881900f24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47a83603029de7d85c42f002265b69f15c6a06de02d75eac38595480815ffc72"} {"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8eff71d33ca3ca73f0a314aa02926cfae15fbb6d05a3ba1f134f24f881900f24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"883d27d518918087febe513041ddf5ceb5dbb0f5d697917ad2f02be90c1cf04c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc3f55ffabf2bd121716902591e32e8913c688decbc8dfe27543ba7304fc7305","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc3f55ffabf2bd121716902591e32e8913c688decbc8dfe27543ba7304fc7305"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8eff71d33ca3ca73f0a314aa02926cfae15fbb6d05a3ba1f134f24f881900f24"} {"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc3f55ffabf2bd121716902591e32e8913c688decbc8dfe27543ba7304fc7305","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa7a9812b19399b58e105c39a5b9fb00e9ec8fdc30dd520fffc46f3450631f21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa7a9812b19399b58e105c39a5b9fb00e9ec8fdc30dd520fffc46f3450631f21"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc3f55ffabf2bd121716902591e32e8913c688decbc8dfe27543ba7304fc7305"} {"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa7a9812b19399b58e105c39a5b9fb00e9ec8fdc30dd520fffc46f3450631f21","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2142a98e52c50ee1477a8369869712feae046acd120894abf318317da192230","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b11acb42d245cfdcbfcf56991548d6f36ad0b7644341f19876fd41397f72082b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b11acb42d245cfdcbfcf56991548d6f36ad0b7644341f19876fd41397f72082b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa7a9812b19399b58e105c39a5b9fb00e9ec8fdc30dd520fffc46f3450631f21"} {"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b11acb42d245cfdcbfcf56991548d6f36ad0b7644341f19876fd41397f72082b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b11acb42d245cfdcbfcf56991548d6f36ad0b7644341f19876fd41397f72082b"} {"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5"} {"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf4d658d37ff58ac9bff0d5427f1f2b0def63c331acea7004adece2d94445edd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"938884675cc188f73fc88a3e60f51c03389f8d34ab84f8aba8175ab4ce0c4885","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34698b12faef1290bddb911dad7b917557e4788005c9d7d2fd0169cd983e8312","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61146a5c7f89b4f78353ecaf079f2c7f3cd1f0a8d4131b70c302d963120e7b94","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59a19c8f99c1a269ecb83fe6b3335aef9373b0bc56010a94d3be360165e46c4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47a83603029de7d85c42f002265b69f15c6a06de02d75eac38595480815ffc72","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8eff71d33ca3ca73f0a314aa02926cfae15fbb6d05a3ba1f134f24f881900f24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc3f55ffabf2bd121716902591e32e8913c688decbc8dfe27543ba7304fc7305","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa7a9812b19399b58e105c39a5b9fb00e9ec8fdc30dd520fffc46f3450631f21","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b11acb42d245cfdcbfcf56991548d6f36ad0b7644341f19876fd41397f72082b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:00:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:00:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2"} {"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2"} {"level":"debug","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:00:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:00:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2"} {"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2"} {"level":"debug","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:00:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:00:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2"} {"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2"} {"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:00:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:00:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2"} {"level":"info","ts":"2026-07-22T19:00:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:00:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2"} {"level":"debug","ts":"2026-07-22T19:00:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:00:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:00:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2"} {"level":"info","ts":"2026-07-22T19:00:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:00:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2"} {"level":"debug","ts":"2026-07-22T19:00:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T19:00:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T19:00:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2"} {"level":"info","ts":"2026-07-22T19:00:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2"} {"level":"info","ts":"2026-07-22T19:00:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T19:00:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T19:00:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T19:00:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2"} {"level":"error","ts":"2026-07-22T19:00:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T19:00:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T19:00:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3ecb63a1-d0fe-4c66-b052-d135be605dea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:54574","PortSpecifier":{"PortValue":54574}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3ecb63a1-d0fe-4c66-b052-d135be605dea","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3ecb63a1-d0fe-4c66-b052-d135be605dea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:54574","PortSpecifier":{"PortValue":54574}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784746846,"nanos":44800312},"http":{"id":"3ecb63a1-d0fe-4c66-b052-d135be605dea","method":"POST","headers":{":authority":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3ecb63a1-d0fe-4c66-b052-d135be605dea","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3ecb63a1-d0fe-4c66-b052-d135be605dea","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8ab0d4f6-f8f1-4cf4-9efe-fca7c4ab5850","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a401cdc-ebb5-4d31-80cd-b4a9f6027e30"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa1ce497e2e7"]}} {"level":"debug","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3ecb63a1-d0fe-4c66-b052-d135be605dea","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa1ce497e2e7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a401cdc-ebb5-4d31-80cd-b4a9f6027e30"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8ab0d4f6-f8f1-4cf4-9efe-fca7c4ab5850","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"34698b12faef1290bddb911dad7b917557e4788005c9d7d2fd0169cd983e8312"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ecb63a1-d0fe-4c66-b052-d135be605dea","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ecb63a1-d0fe-4c66-b052-d135be605dea","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ecb63a1-d0fe-4c66-b052-d135be605dea","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d24283/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3ecb63a1-d0fe-4c66-b052-d135be605dea","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ecb63a1-d0fe-4c66-b052-d135be605dea","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ecb63a1-d0fe-4c66-b052-d135be605dea","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3ecb63a1-d0fe-4c66-b052-d135be605dea","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3ecb63a1-d0fe-4c66-b052-d135be605dea","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"36cc5b7d-2627-4482-893f-43f5f152c2e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:40690","PortSpecifier":{"PortValue":40690}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"36cc5b7d-2627-4482-893f-43f5f152c2e1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-63c82d.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"36cc5b7d-2627-4482-893f-43f5f152c2e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:40690","PortSpecifier":{"PortValue":40690}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784746846,"nanos":82800746},"http":{"id":"36cc5b7d-2627-4482-893f-43f5f152c2e1","method":"POST","headers":{":authority":"e2e-shared-b-63c82d.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"36cc5b7d-2627-4482-893f-43f5f152c2e1","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"36cc5b7d-2627-4482-893f-43f5f152c2e1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8ab0d4f6-f8f1-4cf4-9efe-fca7c4ab5850","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a401cdc-ebb5-4d31-80cd-b4a9f6027e30"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa1ce497e2e7"]}} {"level":"debug","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"36cc5b7d-2627-4482-893f-43f5f152c2e1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa1ce497e2e7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a401cdc-ebb5-4d31-80cd-b4a9f6027e30"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8ab0d4f6-f8f1-4cf4-9efe-fca7c4ab5850","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-63c82d.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36cc5b7d-2627-4482-893f-43f5f152c2e1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36cc5b7d-2627-4482-893f-43f5f152c2e1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36cc5b7d-2627-4482-893f-43f5f152c2e1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-63c82d/rate-test-model-63c82d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-63c82d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"36cc5b7d-2627-4482-893f-43f5f152c2e1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"36cc5b7d-2627-4482-893f-43f5f152c2e1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"36cc5b7d-2627-4482-893f-43f5f152c2e1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"36cc5b7d-2627-4482-893f-43f5f152c2e1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"36cc5b7d-2627-4482-893f-43f5f152c2e1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1310c009-e889-42bb-b3ca-ce3aa50cfb46","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:54576","PortSpecifier":{"PortValue":54576}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1310c009-e889-42bb-b3ca-ce3aa50cfb46","method":"POST","path":"/ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283/v1/completions","host":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1310c009-e889-42bb-b3ca-ce3aa50cfb46","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:54576","PortSpecifier":{"PortValue":54576}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784746846,"nanos":122772946},"http":{"id":"1310c009-e889-42bb-b3ca-ce3aa50cfb46","method":"POST","headers":{":authority":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1310c009-e889-42bb-b3ca-ce3aa50cfb46","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Ml1xqdZOA3d96to1_KjEEk4DI8pcYHMhs0pJSUFsjc7r7NLmdsY37wfQL5Nq"} {"level":"debug","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1310c009-e889-42bb-b3ca-ce3aa50cfb46","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Ml1xqdZOA3d96to1_KjEEk4DI8pcYHMhs0pJSUFsjc7r7NLmdsY37wfQL5Nq\"}"} {"level":"debug","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1310c009-e889-42bb-b3ca-ce3aa50cfb46","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f02c1669-62c8-45b5-980d-625fd4eb45b5","keyName":"e2e-rate-a-fed6b0","subscription":"e2e-rate-iso-a-fed6b0","tenant":"e2e-shared-a-d24283","userId":"f02c1669-62c8-45b5-980d-625fd4eb45b5","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1310c009-e889-42bb-b3ca-ce3aa50cfb46","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283\",\"requestedSubscription\":\"e2e-rate-iso-a-fed6b0\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1310c009-e889-42bb-b3ca-ce3aa50cfb46","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d24283","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fed6b0","namespace":"ai-tenant-e2e-shared-a-d24283","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283"}} {"level":"debug","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1310c009-e889-42bb-b3ca-ce3aa50cfb46","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1310c009-e889-42bb-b3ca-ce3aa50cfb46","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1310c009-e889-42bb-b3ca-ce3aa50cfb46","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1310c009-e889-42bb-b3ca-ce3aa50cfb46","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d24283/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1310c009-e889-42bb-b3ca-ce3aa50cfb46","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1310c009-e889-42bb-b3ca-ce3aa50cfb46","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-fed6b0"} {"level":"debug","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1310c009-e889-42bb-b3ca-ce3aa50cfb46","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1310c009-e889-42bb-b3ca-ce3aa50cfb46","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1310c009-e889-42bb-b3ca-ce3aa50cfb46","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f02c1669-62c8-45b5-980d-625fd4eb45b5","keyName":"e2e-rate-a-fed6b0","selected_subscription":"e2e-rate-iso-a-fed6b0","selected_subscription_key":"ai-tenant-e2e-shared-a-d24283/e2e-rate-iso-a-fed6b0@ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d24283","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fed6b0","namespace":"ai-tenant-e2e-shared-a-d24283","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1310c009-e889-42bb-b3ca-ce3aa50cfb46","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T19:00:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1310c009-e889-42bb-b3ca-ce3aa50cfb46","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T19:00:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aded3189-2ec6-4f0c-8fb1-d1e5291044ff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:54580","PortSpecifier":{"PortValue":54580}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"aded3189-2ec6-4f0c-8fb1-d1e5291044ff","method":"POST","path":"/ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283/v1/completions","host":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T19:00:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aded3189-2ec6-4f0c-8fb1-d1e5291044ff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:54580","PortSpecifier":{"PortValue":54580}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784746847,"nanos":178472890},"http":{"id":"aded3189-2ec6-4f0c-8fb1-d1e5291044ff","method":"POST","headers":{":authority":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:00:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"aded3189-2ec6-4f0c-8fb1-d1e5291044ff","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Ml1xqdZOA3d96to1_KjEEk4DI8pcYHMhs0pJSUFsjc7r7NLmdsY37wfQL5Nq"} {"level":"debug","ts":"2026-07-22T19:00:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"aded3189-2ec6-4f0c-8fb1-d1e5291044ff","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Ml1xqdZOA3d96to1_KjEEk4DI8pcYHMhs0pJSUFsjc7r7NLmdsY37wfQL5Nq\"}"} {"level":"debug","ts":"2026-07-22T19:00:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"aded3189-2ec6-4f0c-8fb1-d1e5291044ff","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f02c1669-62c8-45b5-980d-625fd4eb45b5","keyName":"e2e-rate-a-fed6b0","subscription":"e2e-rate-iso-a-fed6b0","tenant":"e2e-shared-a-d24283","userId":"f02c1669-62c8-45b5-980d-625fd4eb45b5","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T19:00:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"aded3189-2ec6-4f0c-8fb1-d1e5291044ff","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283\",\"requestedSubscription\":\"e2e-rate-iso-a-fed6b0\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-22T19:00:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"aded3189-2ec6-4f0c-8fb1-d1e5291044ff","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d24283","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fed6b0","namespace":"ai-tenant-e2e-shared-a-d24283","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283"}} {"level":"debug","ts":"2026-07-22T19:00:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"aded3189-2ec6-4f0c-8fb1-d1e5291044ff","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:00:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aded3189-2ec6-4f0c-8fb1-d1e5291044ff","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:00:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aded3189-2ec6-4f0c-8fb1-d1e5291044ff","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:00:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aded3189-2ec6-4f0c-8fb1-d1e5291044ff","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d24283/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:00:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aded3189-2ec6-4f0c-8fb1-d1e5291044ff","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:00:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aded3189-2ec6-4f0c-8fb1-d1e5291044ff","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T19:00:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aded3189-2ec6-4f0c-8fb1-d1e5291044ff","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T19:00:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aded3189-2ec6-4f0c-8fb1-d1e5291044ff","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-fed6b0"} {"level":"debug","ts":"2026-07-22T19:00:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aded3189-2ec6-4f0c-8fb1-d1e5291044ff","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f02c1669-62c8-45b5-980d-625fd4eb45b5","keyName":"e2e-rate-a-fed6b0","selected_subscription":"e2e-rate-iso-a-fed6b0","selected_subscription_key":"ai-tenant-e2e-shared-a-d24283/e2e-rate-iso-a-fed6b0@ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d24283","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fed6b0","namespace":"ai-tenant-e2e-shared-a-d24283","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-22T19:00:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aded3189-2ec6-4f0c-8fb1-d1e5291044ff","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T19:00:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aded3189-2ec6-4f0c-8fb1-d1e5291044ff","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T19:00:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a3fd64f-a036-4798-bac7-8574dd5cdfac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:54590","PortSpecifier":{"PortValue":54590}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9a3fd64f-a036-4798-bac7-8574dd5cdfac","method":"POST","path":"/ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283/v1/completions","host":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T19:00:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a3fd64f-a036-4798-bac7-8574dd5cdfac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:54590","PortSpecifier":{"PortValue":54590}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784746848,"nanos":222027264},"http":{"id":"9a3fd64f-a036-4798-bac7-8574dd5cdfac","method":"POST","headers":{":authority":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:00:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9a3fd64f-a036-4798-bac7-8574dd5cdfac","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Ml1xqdZOA3d96to1_KjEEk4DI8pcYHMhs0pJSUFsjc7r7NLmdsY37wfQL5Nq"} {"level":"debug","ts":"2026-07-22T19:00:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9a3fd64f-a036-4798-bac7-8574dd5cdfac","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Ml1xqdZOA3d96to1_KjEEk4DI8pcYHMhs0pJSUFsjc7r7NLmdsY37wfQL5Nq\"}"} {"level":"debug","ts":"2026-07-22T19:00:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9a3fd64f-a036-4798-bac7-8574dd5cdfac","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f02c1669-62c8-45b5-980d-625fd4eb45b5","keyName":"e2e-rate-a-fed6b0","subscription":"e2e-rate-iso-a-fed6b0","tenant":"e2e-shared-a-d24283","userId":"f02c1669-62c8-45b5-980d-625fd4eb45b5","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T19:00:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9a3fd64f-a036-4798-bac7-8574dd5cdfac","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283\",\"requestedSubscription\":\"e2e-rate-iso-a-fed6b0\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-22T19:00:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9a3fd64f-a036-4798-bac7-8574dd5cdfac","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d24283","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fed6b0","namespace":"ai-tenant-e2e-shared-a-d24283","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283"}} {"level":"debug","ts":"2026-07-22T19:00:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9a3fd64f-a036-4798-bac7-8574dd5cdfac","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:00:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a3fd64f-a036-4798-bac7-8574dd5cdfac","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:00:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a3fd64f-a036-4798-bac7-8574dd5cdfac","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:00:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a3fd64f-a036-4798-bac7-8574dd5cdfac","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d24283/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:00:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a3fd64f-a036-4798-bac7-8574dd5cdfac","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:00:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a3fd64f-a036-4798-bac7-8574dd5cdfac","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T19:00:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a3fd64f-a036-4798-bac7-8574dd5cdfac","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-fed6b0"} {"level":"debug","ts":"2026-07-22T19:00:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a3fd64f-a036-4798-bac7-8574dd5cdfac","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T19:00:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a3fd64f-a036-4798-bac7-8574dd5cdfac","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f02c1669-62c8-45b5-980d-625fd4eb45b5","keyName":"e2e-rate-a-fed6b0","selected_subscription":"e2e-rate-iso-a-fed6b0","selected_subscription_key":"ai-tenant-e2e-shared-a-d24283/e2e-rate-iso-a-fed6b0@ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d24283","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fed6b0","namespace":"ai-tenant-e2e-shared-a-d24283","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-22T19:00:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a3fd64f-a036-4798-bac7-8574dd5cdfac","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T19:00:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a3fd64f-a036-4798-bac7-8574dd5cdfac","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T19:00:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"47826cd4-e77c-4133-be6a-bf6b4e87cb40","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:54606","PortSpecifier":{"PortValue":54606}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"47826cd4-e77c-4133-be6a-bf6b4e87cb40","method":"POST","path":"/ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283/v1/completions","host":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T19:00:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"47826cd4-e77c-4133-be6a-bf6b4e87cb40","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:54606","PortSpecifier":{"PortValue":54606}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784746849,"nanos":262532514},"http":{"id":"47826cd4-e77c-4133-be6a-bf6b4e87cb40","method":"POST","headers":{":authority":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:00:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"47826cd4-e77c-4133-be6a-bf6b4e87cb40","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Ml1xqdZOA3d96to1_KjEEk4DI8pcYHMhs0pJSUFsjc7r7NLmdsY37wfQL5Nq"} {"level":"debug","ts":"2026-07-22T19:00:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"47826cd4-e77c-4133-be6a-bf6b4e87cb40","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Ml1xqdZOA3d96to1_KjEEk4DI8pcYHMhs0pJSUFsjc7r7NLmdsY37wfQL5Nq\"}"} {"level":"debug","ts":"2026-07-22T19:00:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"47826cd4-e77c-4133-be6a-bf6b4e87cb40","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f02c1669-62c8-45b5-980d-625fd4eb45b5","keyName":"e2e-rate-a-fed6b0","subscription":"e2e-rate-iso-a-fed6b0","tenant":"e2e-shared-a-d24283","userId":"f02c1669-62c8-45b5-980d-625fd4eb45b5","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T19:00:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"47826cd4-e77c-4133-be6a-bf6b4e87cb40","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283\",\"requestedSubscription\":\"e2e-rate-iso-a-fed6b0\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-22T19:00:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"47826cd4-e77c-4133-be6a-bf6b4e87cb40","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d24283","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fed6b0","namespace":"ai-tenant-e2e-shared-a-d24283","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283"}} {"level":"debug","ts":"2026-07-22T19:00:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"47826cd4-e77c-4133-be6a-bf6b4e87cb40","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:00:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47826cd4-e77c-4133-be6a-bf6b4e87cb40","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:00:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47826cd4-e77c-4133-be6a-bf6b4e87cb40","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:00:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47826cd4-e77c-4133-be6a-bf6b4e87cb40","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:00:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47826cd4-e77c-4133-be6a-bf6b4e87cb40","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d24283/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:00:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47826cd4-e77c-4133-be6a-bf6b4e87cb40","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T19:00:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47826cd4-e77c-4133-be6a-bf6b4e87cb40","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-fed6b0"} {"level":"debug","ts":"2026-07-22T19:00:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47826cd4-e77c-4133-be6a-bf6b4e87cb40","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T19:00:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47826cd4-e77c-4133-be6a-bf6b4e87cb40","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f02c1669-62c8-45b5-980d-625fd4eb45b5","keyName":"e2e-rate-a-fed6b0","selected_subscription":"e2e-rate-iso-a-fed6b0","selected_subscription_key":"ai-tenant-e2e-shared-a-d24283/e2e-rate-iso-a-fed6b0@ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d24283","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fed6b0","namespace":"ai-tenant-e2e-shared-a-d24283","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-22T19:00:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"47826cd4-e77c-4133-be6a-bf6b4e87cb40","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T19:00:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"47826cd4-e77c-4133-be6a-bf6b4e87cb40","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T19:00:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6fdc50ec-6198-493a-8822-3e88590b6ece","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:54610","PortSpecifier":{"PortValue":54610}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6fdc50ec-6198-493a-8822-3e88590b6ece","method":"POST","path":"/ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283/v1/completions","host":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T19:00:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6fdc50ec-6198-493a-8822-3e88590b6ece","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:54610","PortSpecifier":{"PortValue":54610}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784746850,"nanos":297437866},"http":{"id":"6fdc50ec-6198-493a-8822-3e88590b6ece","method":"POST","headers":{":authority":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:00:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6fdc50ec-6198-493a-8822-3e88590b6ece","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Ml1xqdZOA3d96to1_KjEEk4DI8pcYHMhs0pJSUFsjc7r7NLmdsY37wfQL5Nq"} {"level":"debug","ts":"2026-07-22T19:00:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6fdc50ec-6198-493a-8822-3e88590b6ece","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Ml1xqdZOA3d96to1_KjEEk4DI8pcYHMhs0pJSUFsjc7r7NLmdsY37wfQL5Nq\"}"} {"level":"debug","ts":"2026-07-22T19:00:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6fdc50ec-6198-493a-8822-3e88590b6ece","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f02c1669-62c8-45b5-980d-625fd4eb45b5","keyName":"e2e-rate-a-fed6b0","subscription":"e2e-rate-iso-a-fed6b0","tenant":"e2e-shared-a-d24283","userId":"f02c1669-62c8-45b5-980d-625fd4eb45b5","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T19:00:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6fdc50ec-6198-493a-8822-3e88590b6ece","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283\",\"requestedSubscription\":\"e2e-rate-iso-a-fed6b0\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-22T19:00:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6fdc50ec-6198-493a-8822-3e88590b6ece","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d24283","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fed6b0","namespace":"ai-tenant-e2e-shared-a-d24283","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283"}} {"level":"debug","ts":"2026-07-22T19:00:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6fdc50ec-6198-493a-8822-3e88590b6ece","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:00:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6fdc50ec-6198-493a-8822-3e88590b6ece","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:00:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6fdc50ec-6198-493a-8822-3e88590b6ece","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:00:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6fdc50ec-6198-493a-8822-3e88590b6ece","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:00:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6fdc50ec-6198-493a-8822-3e88590b6ece","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d24283/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:00:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6fdc50ec-6198-493a-8822-3e88590b6ece","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T19:00:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6fdc50ec-6198-493a-8822-3e88590b6ece","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T19:00:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6fdc50ec-6198-493a-8822-3e88590b6ece","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-fed6b0"} {"level":"debug","ts":"2026-07-22T19:00:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6fdc50ec-6198-493a-8822-3e88590b6ece","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f02c1669-62c8-45b5-980d-625fd4eb45b5","keyName":"e2e-rate-a-fed6b0","selected_subscription":"e2e-rate-iso-a-fed6b0","selected_subscription_key":"ai-tenant-e2e-shared-a-d24283/e2e-rate-iso-a-fed6b0@ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d24283","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fed6b0","namespace":"ai-tenant-e2e-shared-a-d24283","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-22T19:00:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6fdc50ec-6198-493a-8822-3e88590b6ece","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T19:00:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6fdc50ec-6198-493a-8822-3e88590b6ece","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T19:00:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1a6efbc-10ce-4492-829e-9db9b63001cf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:54618","PortSpecifier":{"PortValue":54618}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c1a6efbc-10ce-4492-829e-9db9b63001cf","method":"POST","path":"/ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283/v1/completions","host":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T19:00:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1a6efbc-10ce-4492-829e-9db9b63001cf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:54618","PortSpecifier":{"PortValue":54618}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784746851,"nanos":336959042},"http":{"id":"c1a6efbc-10ce-4492-829e-9db9b63001cf","method":"POST","headers":{":authority":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:00:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c1a6efbc-10ce-4492-829e-9db9b63001cf","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Ml1xqdZOA3d96to1_KjEEk4DI8pcYHMhs0pJSUFsjc7r7NLmdsY37wfQL5Nq"} {"level":"debug","ts":"2026-07-22T19:00:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c1a6efbc-10ce-4492-829e-9db9b63001cf","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Ml1xqdZOA3d96to1_KjEEk4DI8pcYHMhs0pJSUFsjc7r7NLmdsY37wfQL5Nq\"}"} {"level":"debug","ts":"2026-07-22T19:00:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c1a6efbc-10ce-4492-829e-9db9b63001cf","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f02c1669-62c8-45b5-980d-625fd4eb45b5","keyName":"e2e-rate-a-fed6b0","subscription":"e2e-rate-iso-a-fed6b0","tenant":"e2e-shared-a-d24283","userId":"f02c1669-62c8-45b5-980d-625fd4eb45b5","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T19:00:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c1a6efbc-10ce-4492-829e-9db9b63001cf","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283\",\"requestedSubscription\":\"e2e-rate-iso-a-fed6b0\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-22T19:00:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c1a6efbc-10ce-4492-829e-9db9b63001cf","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d24283","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fed6b0","namespace":"ai-tenant-e2e-shared-a-d24283","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283"}} {"level":"debug","ts":"2026-07-22T19:00:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c1a6efbc-10ce-4492-829e-9db9b63001cf","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:00:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1a6efbc-10ce-4492-829e-9db9b63001cf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:00:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1a6efbc-10ce-4492-829e-9db9b63001cf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:00:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1a6efbc-10ce-4492-829e-9db9b63001cf","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:00:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1a6efbc-10ce-4492-829e-9db9b63001cf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d24283/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:00:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1a6efbc-10ce-4492-829e-9db9b63001cf","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T19:00:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1a6efbc-10ce-4492-829e-9db9b63001cf","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T19:00:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1a6efbc-10ce-4492-829e-9db9b63001cf","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-fed6b0"} {"level":"debug","ts":"2026-07-22T19:00:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1a6efbc-10ce-4492-829e-9db9b63001cf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f02c1669-62c8-45b5-980d-625fd4eb45b5","keyName":"e2e-rate-a-fed6b0","selected_subscription":"e2e-rate-iso-a-fed6b0","selected_subscription_key":"ai-tenant-e2e-shared-a-d24283/e2e-rate-iso-a-fed6b0@ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d24283","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fed6b0","namespace":"ai-tenant-e2e-shared-a-d24283","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-22T19:00:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1a6efbc-10ce-4492-829e-9db9b63001cf","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T19:00:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1a6efbc-10ce-4492-829e-9db9b63001cf","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T19:00:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"82557856-d387-4d5f-bff3-79345c0dce0d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:54632","PortSpecifier":{"PortValue":54632}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"82557856-d387-4d5f-bff3-79345c0dce0d","method":"POST","path":"/ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283/v1/completions","host":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T19:00:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"82557856-d387-4d5f-bff3-79345c0dce0d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:54632","PortSpecifier":{"PortValue":54632}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784746852,"nanos":375762537},"http":{"id":"82557856-d387-4d5f-bff3-79345c0dce0d","method":"POST","headers":{":authority":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:00:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"82557856-d387-4d5f-bff3-79345c0dce0d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Ml1xqdZOA3d96to1_KjEEk4DI8pcYHMhs0pJSUFsjc7r7NLmdsY37wfQL5Nq"} {"level":"debug","ts":"2026-07-22T19:00:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"82557856-d387-4d5f-bff3-79345c0dce0d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Ml1xqdZOA3d96to1_KjEEk4DI8pcYHMhs0pJSUFsjc7r7NLmdsY37wfQL5Nq\"}"} {"level":"debug","ts":"2026-07-22T19:00:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"82557856-d387-4d5f-bff3-79345c0dce0d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f02c1669-62c8-45b5-980d-625fd4eb45b5","keyName":"e2e-rate-a-fed6b0","subscription":"e2e-rate-iso-a-fed6b0","tenant":"e2e-shared-a-d24283","userId":"f02c1669-62c8-45b5-980d-625fd4eb45b5","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T19:00:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"82557856-d387-4d5f-bff3-79345c0dce0d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283\",\"requestedSubscription\":\"e2e-rate-iso-a-fed6b0\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-22T19:00:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"82557856-d387-4d5f-bff3-79345c0dce0d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d24283","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fed6b0","namespace":"ai-tenant-e2e-shared-a-d24283","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283"}} {"level":"debug","ts":"2026-07-22T19:00:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"82557856-d387-4d5f-bff3-79345c0dce0d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:00:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82557856-d387-4d5f-bff3-79345c0dce0d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:00:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82557856-d387-4d5f-bff3-79345c0dce0d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:00:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82557856-d387-4d5f-bff3-79345c0dce0d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d24283/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:00:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82557856-d387-4d5f-bff3-79345c0dce0d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:00:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82557856-d387-4d5f-bff3-79345c0dce0d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T19:00:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82557856-d387-4d5f-bff3-79345c0dce0d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T19:00:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82557856-d387-4d5f-bff3-79345c0dce0d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-fed6b0"} {"level":"debug","ts":"2026-07-22T19:00:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82557856-d387-4d5f-bff3-79345c0dce0d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f02c1669-62c8-45b5-980d-625fd4eb45b5","keyName":"e2e-rate-a-fed6b0","selected_subscription":"e2e-rate-iso-a-fed6b0","selected_subscription_key":"ai-tenant-e2e-shared-a-d24283/e2e-rate-iso-a-fed6b0@ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d24283","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fed6b0","namespace":"ai-tenant-e2e-shared-a-d24283","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-22T19:00:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"82557856-d387-4d5f-bff3-79345c0dce0d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T19:00:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"82557856-d387-4d5f-bff3-79345c0dce0d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d863a8c-f7e7-4c20-9823-f4c3621cbf43","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:51532","PortSpecifier":{"PortValue":51532}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3d863a8c-f7e7-4c20-9823-f4c3621cbf43","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d863a8c-f7e7-4c20-9823-f4c3621cbf43","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:51532","PortSpecifier":{"PortValue":51532}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784746861,"nanos":135333570},"http":{"id":"3d863a8c-f7e7-4c20-9823-f4c3621cbf43","method":"POST","headers":{":authority":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3d863a8c-f7e7-4c20-9823-f4c3621cbf43","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3d863a8c-f7e7-4c20-9823-f4c3621cbf43","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8ab0d4f6-f8f1-4cf4-9efe-fca7c4ab5850","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a401cdc-ebb5-4d31-80cd-b4a9f6027e30"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa1ce497e2e7"]}} {"level":"debug","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3d863a8c-f7e7-4c20-9823-f4c3621cbf43","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa1ce497e2e7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a401cdc-ebb5-4d31-80cd-b4a9f6027e30"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8ab0d4f6-f8f1-4cf4-9efe-fca7c4ab5850","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"34698b12faef1290bddb911dad7b917557e4788005c9d7d2fd0169cd983e8312"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d863a8c-f7e7-4c20-9823-f4c3621cbf43","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d863a8c-f7e7-4c20-9823-f4c3621cbf43","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d863a8c-f7e7-4c20-9823-f4c3621cbf43","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d24283/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3d863a8c-f7e7-4c20-9823-f4c3621cbf43","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d863a8c-f7e7-4c20-9823-f4c3621cbf43","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d863a8c-f7e7-4c20-9823-f4c3621cbf43","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d863a8c-f7e7-4c20-9823-f4c3621cbf43","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d863a8c-f7e7-4c20-9823-f4c3621cbf43","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7bdd902e-1f67-4b72-a342-063d3a2d8893","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:37736","PortSpecifier":{"PortValue":37736}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7bdd902e-1f67-4b72-a342-063d3a2d8893","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-63c82d.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7bdd902e-1f67-4b72-a342-063d3a2d8893","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:37736","PortSpecifier":{"PortValue":37736}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784746861,"nanos":175723451},"http":{"id":"7bdd902e-1f67-4b72-a342-063d3a2d8893","method":"POST","headers":{":authority":"e2e-shared-b-63c82d.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7bdd902e-1f67-4b72-a342-063d3a2d8893","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7bdd902e-1f67-4b72-a342-063d3a2d8893","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8ab0d4f6-f8f1-4cf4-9efe-fca7c4ab5850","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a401cdc-ebb5-4d31-80cd-b4a9f6027e30"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa1ce497e2e7"]}} {"level":"debug","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7bdd902e-1f67-4b72-a342-063d3a2d8893","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa1ce497e2e7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a401cdc-ebb5-4d31-80cd-b4a9f6027e30"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8ab0d4f6-f8f1-4cf4-9efe-fca7c4ab5850","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-63c82d.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7bdd902e-1f67-4b72-a342-063d3a2d8893","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7bdd902e-1f67-4b72-a342-063d3a2d8893","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7bdd902e-1f67-4b72-a342-063d3a2d8893","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-63c82d/rate-test-model-63c82d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-63c82d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7bdd902e-1f67-4b72-a342-063d3a2d8893","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7bdd902e-1f67-4b72-a342-063d3a2d8893","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7bdd902e-1f67-4b72-a342-063d3a2d8893","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7bdd902e-1f67-4b72-a342-063d3a2d8893","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7bdd902e-1f67-4b72-a342-063d3a2d8893","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"58945e10-9591-43df-aff3-a81db070d6af","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:51542","PortSpecifier":{"PortValue":51542}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"58945e10-9591-43df-aff3-a81db070d6af","method":"POST","path":"/ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283/v1/completions","host":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"58945e10-9591-43df-aff3-a81db070d6af","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:51542","PortSpecifier":{"PortValue":51542}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784746861,"nanos":218063397},"http":{"id":"58945e10-9591-43df-aff3-a81db070d6af","method":"POST","headers":{":authority":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"58945e10-9591-43df-aff3-a81db070d6af","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-10yt9EKSLQv4EU09y_43UI6pBbrPz6AWVjBDOsj9GyOqXlgvPwxYINICqLVBs"} {"level":"debug","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"58945e10-9591-43df-aff3-a81db070d6af","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-10yt9EKSLQv4EU09y_43UI6pBbrPz6AWVjBDOsj9GyOqXlgvPwxYINICqLVBs\"}"} {"level":"debug","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"58945e10-9591-43df-aff3-a81db070d6af","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1fc46efb-e517-4e84-983e-e58810b5a540","keyName":"e2e-rate-a-4366e8","subscription":"e2e-rate-iso-a-4366e8","tenant":"e2e-shared-a-d24283","userId":"1fc46efb-e517-4e84-983e-e58810b5a540","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"58945e10-9591-43df-aff3-a81db070d6af","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283\",\"requestedSubscription\":\"e2e-rate-iso-a-4366e8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"58945e10-9591-43df-aff3-a81db070d6af","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d24283","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4366e8","namespace":"ai-tenant-e2e-shared-a-d24283","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283"}} {"level":"debug","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"58945e10-9591-43df-aff3-a81db070d6af","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58945e10-9591-43df-aff3-a81db070d6af","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58945e10-9591-43df-aff3-a81db070d6af","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58945e10-9591-43df-aff3-a81db070d6af","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58945e10-9591-43df-aff3-a81db070d6af","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d24283/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58945e10-9591-43df-aff3-a81db070d6af","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58945e10-9591-43df-aff3-a81db070d6af","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58945e10-9591-43df-aff3-a81db070d6af","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-4366e8"} {"level":"debug","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58945e10-9591-43df-aff3-a81db070d6af","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1fc46efb-e517-4e84-983e-e58810b5a540","keyName":"e2e-rate-a-4366e8","selected_subscription":"e2e-rate-iso-a-4366e8","selected_subscription_key":"ai-tenant-e2e-shared-a-d24283/e2e-rate-iso-a-4366e8@ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d24283","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4366e8","namespace":"ai-tenant-e2e-shared-a-d24283","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"58945e10-9591-43df-aff3-a81db070d6af","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T19:01:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"58945e10-9591-43df-aff3-a81db070d6af","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T19:01:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ab8dc073-5cc1-4d93-9321-ec6f4c332560","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:51550","PortSpecifier":{"PortValue":51550}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ab8dc073-5cc1-4d93-9321-ec6f4c332560","method":"POST","path":"/ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283/v1/completions","host":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T19:01:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ab8dc073-5cc1-4d93-9321-ec6f4c332560","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:51550","PortSpecifier":{"PortValue":51550}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784746862,"nanos":258820140},"http":{"id":"ab8dc073-5cc1-4d93-9321-ec6f4c332560","method":"POST","headers":{":authority":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:01:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ab8dc073-5cc1-4d93-9321-ec6f4c332560","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-10yt9EKSLQv4EU09y_43UI6pBbrPz6AWVjBDOsj9GyOqXlgvPwxYINICqLVBs"} {"level":"debug","ts":"2026-07-22T19:01:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ab8dc073-5cc1-4d93-9321-ec6f4c332560","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-10yt9EKSLQv4EU09y_43UI6pBbrPz6AWVjBDOsj9GyOqXlgvPwxYINICqLVBs\"}"} {"level":"debug","ts":"2026-07-22T19:01:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ab8dc073-5cc1-4d93-9321-ec6f4c332560","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1fc46efb-e517-4e84-983e-e58810b5a540","keyName":"e2e-rate-a-4366e8","subscription":"e2e-rate-iso-a-4366e8","tenant":"e2e-shared-a-d24283","userId":"1fc46efb-e517-4e84-983e-e58810b5a540","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T19:01:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ab8dc073-5cc1-4d93-9321-ec6f4c332560","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283\",\"requestedSubscription\":\"e2e-rate-iso-a-4366e8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-22T19:01:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ab8dc073-5cc1-4d93-9321-ec6f4c332560","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d24283","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4366e8","namespace":"ai-tenant-e2e-shared-a-d24283","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283"}} {"level":"debug","ts":"2026-07-22T19:01:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ab8dc073-5cc1-4d93-9321-ec6f4c332560","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:01:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ab8dc073-5cc1-4d93-9321-ec6f4c332560","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:01:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ab8dc073-5cc1-4d93-9321-ec6f4c332560","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:01:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ab8dc073-5cc1-4d93-9321-ec6f4c332560","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d24283/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:01:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ab8dc073-5cc1-4d93-9321-ec6f4c332560","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:01:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ab8dc073-5cc1-4d93-9321-ec6f4c332560","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T19:01:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ab8dc073-5cc1-4d93-9321-ec6f4c332560","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-4366e8"} {"level":"debug","ts":"2026-07-22T19:01:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ab8dc073-5cc1-4d93-9321-ec6f4c332560","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T19:01:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ab8dc073-5cc1-4d93-9321-ec6f4c332560","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1fc46efb-e517-4e84-983e-e58810b5a540","keyName":"e2e-rate-a-4366e8","selected_subscription":"e2e-rate-iso-a-4366e8","selected_subscription_key":"ai-tenant-e2e-shared-a-d24283/e2e-rate-iso-a-4366e8@ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d24283","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4366e8","namespace":"ai-tenant-e2e-shared-a-d24283","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-22T19:01:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ab8dc073-5cc1-4d93-9321-ec6f4c332560","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T19:01:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ab8dc073-5cc1-4d93-9321-ec6f4c332560","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T19:01:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ada90bc2-53ae-46ef-b951-020761680aae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:58916","PortSpecifier":{"PortValue":58916}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ada90bc2-53ae-46ef-b951-020761680aae","method":"POST","path":"/ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283/v1/completions","host":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T19:01:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ada90bc2-53ae-46ef-b951-020761680aae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:58916","PortSpecifier":{"PortValue":58916}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784746863,"nanos":298239359},"http":{"id":"ada90bc2-53ae-46ef-b951-020761680aae","method":"POST","headers":{":authority":"e2e-shared-a-d24283.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:01:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ada90bc2-53ae-46ef-b951-020761680aae","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-10yt9EKSLQv4EU09y_43UI6pBbrPz6AWVjBDOsj9GyOqXlgvPwxYINICqLVBs"} {"level":"debug","ts":"2026-07-22T19:01:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ada90bc2-53ae-46ef-b951-020761680aae","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-10yt9EKSLQv4EU09y_43UI6pBbrPz6AWVjBDOsj9GyOqXlgvPwxYINICqLVBs\"}"} {"level":"debug","ts":"2026-07-22T19:01:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ada90bc2-53ae-46ef-b951-020761680aae","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1fc46efb-e517-4e84-983e-e58810b5a540","keyName":"e2e-rate-a-4366e8","subscription":"e2e-rate-iso-a-4366e8","tenant":"e2e-shared-a-d24283","userId":"1fc46efb-e517-4e84-983e-e58810b5a540","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T19:01:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ada90bc2-53ae-46ef-b951-020761680aae","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283\",\"requestedSubscription\":\"e2e-rate-iso-a-4366e8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-22T19:01:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ada90bc2-53ae-46ef-b951-020761680aae","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d24283.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d24283","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4366e8","namespace":"ai-tenant-e2e-shared-a-d24283","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283"}} {"level":"debug","ts":"2026-07-22T19:01:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ada90bc2-53ae-46ef-b951-020761680aae","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:01:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ada90bc2-53ae-46ef-b951-020761680aae","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:01:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ada90bc2-53ae-46ef-b951-020761680aae","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:01:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ada90bc2-53ae-46ef-b951-020761680aae","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:01:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ada90bc2-53ae-46ef-b951-020761680aae","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d24283/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:01:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ada90bc2-53ae-46ef-b951-020761680aae","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T19:01:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ada90bc2-53ae-46ef-b951-020761680aae","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-4366e8"} {"level":"debug","ts":"2026-07-22T19:01:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ada90bc2-53ae-46ef-b951-020761680aae","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T19:01:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ada90bc2-53ae-46ef-b951-020761680aae","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1fc46efb-e517-4e84-983e-e58810b5a540","keyName":"e2e-rate-a-4366e8","selected_subscription":"e2e-rate-iso-a-4366e8","selected_subscription_key":"ai-tenant-e2e-shared-a-d24283/e2e-rate-iso-a-4366e8@ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d24283","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4366e8","namespace":"ai-tenant-e2e-shared-a-d24283","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d24283/rate-test-model-d24283"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-22T19:01:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ada90bc2-53ae-46ef-b951-020761680aae","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T19:01:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ada90bc2-53ae-46ef-b951-020761680aae","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T19:01:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6d1bc5fb-0828-4a23-bd58-908098e2f28b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:49992","PortSpecifier":{"PortValue":49992}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6d1bc5fb-0828-4a23-bd58-908098e2f28b","method":"POST","path":"/ai-tenant-e2e-shared-b-63c82d/rate-test-model-63c82d/v1/completions","host":"e2e-shared-b-63c82d.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T19:01:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6d1bc5fb-0828-4a23-bd58-908098e2f28b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:49992","PortSpecifier":{"PortValue":49992}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784746863,"nanos":338604580},"http":{"id":"6d1bc5fb-0828-4a23-bd58-908098e2f28b","method":"POST","headers":{":authority":"e2e-shared-b-63c82d.apps.970fdf88-4d4c-483d-b260-fa1ce497e2e7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-63c82d/rate-test-model-63c82d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:01:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6d1bc5fb-0828-4a23-bd58-908098e2f28b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-uC9GS8OnID33Qad9_ZFMeMTVeFOv2jQHr9OcKLlg8uSudfyrYQrtJWVlSh9y"} {"level":"debug","ts":"2026-07-22T19:01:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6d1bc5fb-0828-4a23-bd58-908098e2f28b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-63c82d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-uC9GS8OnID33Qad9_ZFMeMTVeFOv2jQHr9OcKLlg8uSudfyrYQrtJWVlSh9y\"}"} {"level":"debug","ts":"2026-07-22T19:01:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6d1bc5fb-0828-4a23-bd58-908098e2f28b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-63c82d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"af43016a-d08f-4b87-968a-4343daa1ead2","keyName":"e2e-rate-b-4366e8","subscription":"e2e-rate-iso-b-4366e8","tenant":"e2e-shared-b-63c82d","userId":"af43016a-d08f-4b87-968a-4343daa1ead2","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T19:01:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6d1bc5fb-0828-4a23-bd58-908098e2f28b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-63c82d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-63c82d/rate-test-model-63c82d\",\"requestedSubscription\":\"e2e-rate-iso-b-4366e8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-22T19:01:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6d1bc5fb-0828-4a23-bd58-908098e2f28b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-63c82d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-63c82d","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-4366e8","namespace":"ai-tenant-e2e-shared-b-63c82d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-63c82d/rate-test-model-63c82d"}} {"level":"debug","ts":"2026-07-22T19:01:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6d1bc5fb-0828-4a23-bd58-908098e2f28b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T19:01:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d1bc5fb-0828-4a23-bd58-908098e2f28b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:01:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d1bc5fb-0828-4a23-bd58-908098e2f28b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:01:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d1bc5fb-0828-4a23-bd58-908098e2f28b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:01:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d1bc5fb-0828-4a23-bd58-908098e2f28b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-63c82d/rate-test-model-63c82d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-63c82d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T19:01:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d1bc5fb-0828-4a23-bd58-908098e2f28b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T19:01:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d1bc5fb-0828-4a23-bd58-908098e2f28b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T19:01:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d1bc5fb-0828-4a23-bd58-908098e2f28b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-4366e8"} {"level":"debug","ts":"2026-07-22T19:01:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d1bc5fb-0828-4a23-bd58-908098e2f28b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"af43016a-d08f-4b87-968a-4343daa1ead2","keyName":"e2e-rate-b-4366e8","selected_subscription":"e2e-rate-iso-b-4366e8","selected_subscription_key":"ai-tenant-e2e-shared-b-63c82d/e2e-rate-iso-b-4366e8@ai-tenant-e2e-shared-b-63c82d/rate-test-model-63c82d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-63c82d","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-4366e8","namespace":"ai-tenant-e2e-shared-b-63c82d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-63c82d/rate-test-model-63c82d"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-22T19:01:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6d1bc5fb-0828-4a23-bd58-908098e2f28b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T19:01:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6d1bc5fb-0828-4a23-bd58-908098e2f28b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T19:01:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/938884675cc188f73fc88a3e60f51c03389f8d34ab84f8aba8175ab4ce0c4885"} {"level":"info","ts":"2026-07-22T19:01:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/59a19c8f99c1a269ecb83fe6b3335aef9373b0bc56010a94d3be360165e46c4e"} {"level":"info","ts":"2026-07-22T19:01:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f412b011d11b9fc00650244e299b50666e7518590637e270aa4274d0d925854f"} {"level":"info","ts":"2026-07-22T19:01:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/883d27d518918087febe513041ddf5ceb5dbb0f5d697917ad2f02be90c1cf04c"} {"level":"info","ts":"2026-07-22T19:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0ef9420d02b9dcaff93c018a231cb847de6ba9960c665c3090c452ae988e7742"} {"level":"info","ts":"2026-07-22T19:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cf4d658d37ff58ac9bff0d5427f1f2b0def63c331acea7004adece2d94445edd"} {"level":"info","ts":"2026-07-22T19:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/34698b12faef1290bddb911dad7b917557e4788005c9d7d2fd0169cd983e8312"} {"level":"info","ts":"2026-07-22T19:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e8a2941cdfe3a6ceca3264566c0ab2d04ed9a8c0c2f6107abe3274dcab31d9e5"} {"level":"info","ts":"2026-07-22T19:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b2c4bcc2780c5bbb6c9e1204dfe8de7e1945e786128a8695941fecef227f85ff"} {"level":"info","ts":"2026-07-22T19:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e24221d3de0f88310d2a8e9ca3081bc5eb58e6ace41d48da55095f6c3558bd30"} {"level":"info","ts":"2026-07-22T19:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8eff71d33ca3ca73f0a314aa02926cfae15fbb6d05a3ba1f134f24f881900f24"} {"level":"info","ts":"2026-07-22T19:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b1a37c8ffaed4ad487dc97785214553724bc0ab32185412fb7703160b0ed9e74"} {"level":"info","ts":"2026-07-22T19:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d2142a98e52c50ee1477a8369869712feae046acd120894abf318317da192230"} {"level":"info","ts":"2026-07-22T19:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b11acb42d245cfdcbfcf56991548d6f36ad0b7644341f19876fd41397f72082b"} {"level":"info","ts":"2026-07-22T19:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/020e1eed36392bd59e06b9413046bbf82a8c72f01a1341a796b42294bb637912"} {"level":"info","ts":"2026-07-22T19:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6200e78527230bc1efee2a47eed7fc96176cbca4693072da5317011f952b9fd2"} {"level":"info","ts":"2026-07-22T19:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/38fc18d2c0653ffb7047cd0572b1bceeee412941bd80ae4adee05847384bd81e"} {"level":"info","ts":"2026-07-22T19:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aa7a9812b19399b58e105c39a5b9fb00e9ec8fdc30dd520fffc46f3450631f21"} {"level":"info","ts":"2026-07-22T19:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fc3f55ffabf2bd121716902591e32e8913c688decbc8dfe27543ba7304fc7305"} {"level":"info","ts":"2026-07-22T19:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d5e5890dfb7159630b1d5b119ec80e979ae63655a0d9041da59476f82a64a1e2"} {"level":"info","ts":"2026-07-22T19:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/30f5546b881c5125883b88b5554db6acb93c20c1d20cd199634c4b5f186f9738"} {"level":"info","ts":"2026-07-22T19:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/61146a5c7f89b4f78353ecaf079f2c7f3cd1f0a8d4131b70c302d963120e7b94"} {"level":"info","ts":"2026-07-22T19:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/098b7410556592b63443936cd10f355ed2e04351afaaf2da40d2fda4cb84177f"} {"level":"info","ts":"2026-07-22T19:01:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/47a83603029de7d85c42f002265b69f15c6a06de02d75eac38595480815ffc72"}