--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"debug","ts":"2026-07-14T15:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"504059f2cf7bbd9be8343557e63919054e26a6605cc693c1ee8d36e4dc46043d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/504059f2cf7bbd9be8343557e63919054e26a6605cc693c1ee8d36e4dc46043d"} {"level":"debug","ts":"2026-07-14T15:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"504059f2cf7bbd9be8343557e63919054e26a6605cc693c1ee8d36e4dc46043d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:10:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:10:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["504059f2cf7bbd9be8343557e63919054e26a6605cc693c1ee8d36e4dc46043d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"504059f2cf7bbd9be8343557e63919054e26a6605cc693c1ee8d36e4dc46043d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6be90af30f03e34aecafc74c8eaf3895a372be54be7938c6e8704761f8f84d0d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:10:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:10:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6be90af30f03e34aecafc74c8eaf3895a372be54be7938c6e8704761f8f84d0d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"504059f2cf7bbd9be8343557e63919054e26a6605cc693c1ee8d36e4dc46043d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6be90af30f03e34aecafc74c8eaf3895a372be54be7938c6e8704761f8f84d0d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6be90af30f03e34aecafc74c8eaf3895a372be54be7938c6e8704761f8f84d0d"} {"level":"debug","ts":"2026-07-14T15:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6be90af30f03e34aecafc74c8eaf3895a372be54be7938c6e8704761f8f84d0d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:10:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:10:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6be90af30f03e34aecafc74c8eaf3895a372be54be7938c6e8704761f8f84d0d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6be90af30f03e34aecafc74c8eaf3895a372be54be7938c6e8704761f8f84d0d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6be90af30f03e34aecafc74c8eaf3895a372be54be7938c6e8704761f8f84d0d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/504059f2cf7bbd9be8343557e63919054e26a6605cc693c1ee8d36e4dc46043d"} {"level":"info","ts":"2026-07-14T15:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6be90af30f03e34aecafc74c8eaf3895a372be54be7938c6e8704761f8f84d0d"} {"level":"debug","ts":"2026-07-14T15:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"920bc86934d3b2072ab3ffc3f4c5d9e17aa08d6bed2f3313f3533296681ef243","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:10:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:10:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"920bc86934d3b2072ab3ffc3f4c5d9e17aa08d6bed2f3313f3533296681ef243","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"920bc86934d3b2072ab3ffc3f4c5d9e17aa08d6bed2f3313f3533296681ef243","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/920bc86934d3b2072ab3ffc3f4c5d9e17aa08d6bed2f3313f3533296681ef243"} {"level":"debug","ts":"2026-07-14T15:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"920bc86934d3b2072ab3ffc3f4c5d9e17aa08d6bed2f3313f3533296681ef243","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/920bc86934d3b2072ab3ffc3f4c5d9e17aa08d6bed2f3313f3533296681ef243"} {"level":"debug","ts":"2026-07-14T15:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"920bc86934d3b2072ab3ffc3f4c5d9e17aa08d6bed2f3313f3533296681ef243","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:10:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:10:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["920bc86934d3b2072ab3ffc3f4c5d9e17aa08d6bed2f3313f3533296681ef243"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"920bc86934d3b2072ab3ffc3f4c5d9e17aa08d6bed2f3313f3533296681ef243","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"920bc86934d3b2072ab3ffc3f4c5d9e17aa08d6bed2f3313f3533296681ef243","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:10:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:10:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"920bc86934d3b2072ab3ffc3f4c5d9e17aa08d6bed2f3313f3533296681ef243","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"920bc86934d3b2072ab3ffc3f4c5d9e17aa08d6bed2f3313f3533296681ef243","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/920bc86934d3b2072ab3ffc3f4c5d9e17aa08d6bed2f3313f3533296681ef243"} {"level":"debug","ts":"2026-07-14T15:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"920bc86934d3b2072ab3ffc3f4c5d9e17aa08d6bed2f3313f3533296681ef243","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"920bc86934d3b2072ab3ffc3f4c5d9e17aa08d6bed2f3313f3533296681ef243","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/920bc86934d3b2072ab3ffc3f4c5d9e17aa08d6bed2f3313f3533296681ef243"} {"level":"debug","ts":"2026-07-14T15:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"920bc86934d3b2072ab3ffc3f4c5d9e17aa08d6bed2f3313f3533296681ef243","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:10:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:10:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["920bc86934d3b2072ab3ffc3f4c5d9e17aa08d6bed2f3313f3533296681ef243"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"920bc86934d3b2072ab3ffc3f4c5d9e17aa08d6bed2f3313f3533296681ef243","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"920bc86934d3b2072ab3ffc3f4c5d9e17aa08d6bed2f3313f3533296681ef243","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:10:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:10:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"920bc86934d3b2072ab3ffc3f4c5d9e17aa08d6bed2f3313f3533296681ef243","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"920bc86934d3b2072ab3ffc3f4c5d9e17aa08d6bed2f3313f3533296681ef243","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"920bc86934d3b2072ab3ffc3f4c5d9e17aa08d6bed2f3313f3533296681ef243","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/920bc86934d3b2072ab3ffc3f4c5d9e17aa08d6bed2f3313f3533296681ef243"} {"level":"debug","ts":"2026-07-14T15:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63b5c351bf7661d3ec76b42051a12e70266b3c3e2b2b6eca858e4174c50f192e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:10:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:10:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/920bc86934d3b2072ab3ffc3f4c5d9e17aa08d6bed2f3313f3533296681ef243"} {"level":"info","ts":"2026-07-14T15:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63b5c351bf7661d3ec76b42051a12e70266b3c3e2b2b6eca858e4174c50f192e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"920bc86934d3b2072ab3ffc3f4c5d9e17aa08d6bed2f3313f3533296681ef243","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:10:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:10:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["920bc86934d3b2072ab3ffc3f4c5d9e17aa08d6bed2f3313f3533296681ef243"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63b5c351bf7661d3ec76b42051a12e70266b3c3e2b2b6eca858e4174c50f192e"} {"level":"info","ts":"2026-07-14T15:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"920bc86934d3b2072ab3ffc3f4c5d9e17aa08d6bed2f3313f3533296681ef243","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63b5c351bf7661d3ec76b42051a12e70266b3c3e2b2b6eca858e4174c50f192e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:10:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:10:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63b5c351bf7661d3ec76b42051a12e70266b3c3e2b2b6eca858e4174c50f192e"} {"level":"info","ts":"2026-07-14T15:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63b5c351bf7661d3ec76b42051a12e70266b3c3e2b2b6eca858e4174c50f192e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"920bc86934d3b2072ab3ffc3f4c5d9e17aa08d6bed2f3313f3533296681ef243","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:10:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:10:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"920bc86934d3b2072ab3ffc3f4c5d9e17aa08d6bed2f3313f3533296681ef243","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63b5c351bf7661d3ec76b42051a12e70266b3c3e2b2b6eca858e4174c50f192e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:10:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:10:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63b5c351bf7661d3ec76b42051a12e70266b3c3e2b2b6eca858e4174c50f192e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/920bc86934d3b2072ab3ffc3f4c5d9e17aa08d6bed2f3313f3533296681ef243"} {"level":"info","ts":"2026-07-14T15:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63b5c351bf7661d3ec76b42051a12e70266b3c3e2b2b6eca858e4174c50f192e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"920bc86934d3b2072ab3ffc3f4c5d9e17aa08d6bed2f3313f3533296681ef243","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:10:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:10:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["920bc86934d3b2072ab3ffc3f4c5d9e17aa08d6bed2f3313f3533296681ef243"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63b5c351bf7661d3ec76b42051a12e70266b3c3e2b2b6eca858e4174c50f192e"} {"level":"info","ts":"2026-07-14T15:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"920bc86934d3b2072ab3ffc3f4c5d9e17aa08d6bed2f3313f3533296681ef243","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63b5c351bf7661d3ec76b42051a12e70266b3c3e2b2b6eca858e4174c50f192e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"920bc86934d3b2072ab3ffc3f4c5d9e17aa08d6bed2f3313f3533296681ef243","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:10:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:10:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"920bc86934d3b2072ab3ffc3f4c5d9e17aa08d6bed2f3313f3533296681ef243","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"920bc86934d3b2072ab3ffc3f4c5d9e17aa08d6bed2f3313f3533296681ef243","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"920bc86934d3b2072ab3ffc3f4c5d9e17aa08d6bed2f3313f3533296681ef243","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/920bc86934d3b2072ab3ffc3f4c5d9e17aa08d6bed2f3313f3533296681ef243"} {"level":"debug","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"920bc86934d3b2072ab3ffc3f4c5d9e17aa08d6bed2f3313f3533296681ef243","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:10:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:10:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["920bc86934d3b2072ab3ffc3f4c5d9e17aa08d6bed2f3313f3533296681ef243"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"920bc86934d3b2072ab3ffc3f4c5d9e17aa08d6bed2f3313f3533296681ef243","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"920bc86934d3b2072ab3ffc3f4c5d9e17aa08d6bed2f3313f3533296681ef243","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63b5c351bf7661d3ec76b42051a12e70266b3c3e2b2b6eca858e4174c50f192e"} {"level":"debug","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"604061bd58f8ea487ef30b6275a5670c166e9a232b6f7287a0da92793239fb2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:10:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:10:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"604061bd58f8ea487ef30b6275a5670c166e9a232b6f7287a0da92793239fb2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03f24cce13f6afb2a26fa87c093aa093f97f36eda441598fbd406c73874d67cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:10:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:10:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/920bc86934d3b2072ab3ffc3f4c5d9e17aa08d6bed2f3313f3533296681ef243"} {"level":"info","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03f24cce13f6afb2a26fa87c093aa093f97f36eda441598fbd406c73874d67cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"604061bd58f8ea487ef30b6275a5670c166e9a232b6f7287a0da92793239fb2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:10:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:10:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/604061bd58f8ea487ef30b6275a5670c166e9a232b6f7287a0da92793239fb2e"} {"level":"info","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"604061bd58f8ea487ef30b6275a5670c166e9a232b6f7287a0da92793239fb2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03f24cce13f6afb2a26fa87c093aa093f97f36eda441598fbd406c73874d67cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:10:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:10:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03f24cce13f6afb2a26fa87c093aa093f97f36eda441598fbd406c73874d67cb"} {"level":"info","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03f24cce13f6afb2a26fa87c093aa093f97f36eda441598fbd406c73874d67cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"604061bd58f8ea487ef30b6275a5670c166e9a232b6f7287a0da92793239fb2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03f24cce13f6afb2a26fa87c093aa093f97f36eda441598fbd406c73874d67cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:10:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:10:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03f24cce13f6afb2a26fa87c093aa093f97f36eda441598fbd406c73874d67cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/604061bd58f8ea487ef30b6275a5670c166e9a232b6f7287a0da92793239fb2e"} {"level":"info","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03f24cce13f6afb2a26fa87c093aa093f97f36eda441598fbd406c73874d67cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"604061bd58f8ea487ef30b6275a5670c166e9a232b6f7287a0da92793239fb2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:10:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:10:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["604061bd58f8ea487ef30b6275a5670c166e9a232b6f7287a0da92793239fb2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03f24cce13f6afb2a26fa87c093aa093f97f36eda441598fbd406c73874d67cb"} {"level":"info","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03f24cce13f6afb2a26fa87c093aa093f97f36eda441598fbd406c73874d67cb"} {"level":"info","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"604061bd58f8ea487ef30b6275a5670c166e9a232b6f7287a0da92793239fb2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03f24cce13f6afb2a26fa87c093aa093f97f36eda441598fbd406c73874d67cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b7bf2464caaba4c60b701594e16aa7f93617bea491d6865986f0e71fdf1fca4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:10:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:10:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b7bf2464caaba4c60b701594e16aa7f93617bea491d6865986f0e71fdf1fca4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8be62960aa378ba373bf3f426fe305bad7ae0eb49db4b4b510eb2f7ba945aefa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:10:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:10:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b7bf2464caaba4c60b701594e16aa7f93617bea491d6865986f0e71fdf1fca4"} {"level":"info","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/604061bd58f8ea487ef30b6275a5670c166e9a232b6f7287a0da92793239fb2e"} {"level":"info","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8be62960aa378ba373bf3f426fe305bad7ae0eb49db4b4b510eb2f7ba945aefa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"604061bd58f8ea487ef30b6275a5670c166e9a232b6f7287a0da92793239fb2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b7bf2464caaba4c60b701594e16aa7f93617bea491d6865986f0e71fdf1fca4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:10:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:10:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b7bf2464caaba4c60b701594e16aa7f93617bea491d6865986f0e71fdf1fca4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8be62960aa378ba373bf3f426fe305bad7ae0eb49db4b4b510eb2f7ba945aefa"} {"level":"info","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b7bf2464caaba4c60b701594e16aa7f93617bea491d6865986f0e71fdf1fca4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8be62960aa378ba373bf3f426fe305bad7ae0eb49db4b4b510eb2f7ba945aefa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:10:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:10:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8be62960aa378ba373bf3f426fe305bad7ae0eb49db4b4b510eb2f7ba945aefa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b7bf2464caaba4c60b701594e16aa7f93617bea491d6865986f0e71fdf1fca4"} {"level":"info","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8be62960aa378ba373bf3f426fe305bad7ae0eb49db4b4b510eb2f7ba945aefa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b7bf2464caaba4c60b701594e16aa7f93617bea491d6865986f0e71fdf1fca4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:10:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:10:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8be62960aa378ba373bf3f426fe305bad7ae0eb49db4b4b510eb2f7ba945aefa"} {"level":"info","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8be62960aa378ba373bf3f426fe305bad7ae0eb49db4b4b510eb2f7ba945aefa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:10:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:10:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375"} {"level":"info","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:10:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:10:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:10:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:10:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b7bf2464caaba4c60b701594e16aa7f93617bea491d6865986f0e71fdf1fca4"} {"level":"info","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:10:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:10:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8be62960aa378ba373bf3f426fe305bad7ae0eb49db4b4b510eb2f7ba945aefa"} {"level":"error","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:10:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:10:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375"} {"level":"info","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375"} {"level":"debug","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375"} {"level":"debug","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:10:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:10:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:10:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:10:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375"} {"level":"info","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:10:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:10:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375"} {"level":"info","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:10:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:10:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:10:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:10:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375"} {"level":"info","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375"} {"level":"debug","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:10:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:10:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:10:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:10:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375"} {"level":"info","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375"} {"level":"debug","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:10:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:10:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:10:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:10:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375"} {"level":"debug","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375"} {"level":"debug","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:10:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:10:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:10:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:10:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375"} {"level":"debug","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375"} {"level":"debug","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:10:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:10:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375"} {"level":"debug","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"097584294f40a66ef8ff391a5f642599f2588e7fac553251f936409c0c0b4429","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:10:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:10:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"097584294f40a66ef8ff391a5f642599f2588e7fac553251f936409c0c0b4429","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"097584294f40a66ef8ff391a5f642599f2588e7fac553251f936409c0c0b4429","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"097584294f40a66ef8ff391a5f642599f2588e7fac553251f936409c0c0b4429","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/097584294f40a66ef8ff391a5f642599f2588e7fac553251f936409c0c0b4429"} {"level":"debug","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"097584294f40a66ef8ff391a5f642599f2588e7fac553251f936409c0c0b4429","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/097584294f40a66ef8ff391a5f642599f2588e7fac553251f936409c0c0b4429"} {"level":"debug","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"097584294f40a66ef8ff391a5f642599f2588e7fac553251f936409c0c0b4429","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:10:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:10:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["097584294f40a66ef8ff391a5f642599f2588e7fac553251f936409c0c0b4429"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"097584294f40a66ef8ff391a5f642599f2588e7fac553251f936409c0c0b4429","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"097584294f40a66ef8ff391a5f642599f2588e7fac553251f936409c0c0b4429","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:10:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:10:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"097584294f40a66ef8ff391a5f642599f2588e7fac553251f936409c0c0b4429","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"097584294f40a66ef8ff391a5f642599f2588e7fac553251f936409c0c0b4429","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"097584294f40a66ef8ff391a5f642599f2588e7fac553251f936409c0c0b4429","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/097584294f40a66ef8ff391a5f642599f2588e7fac553251f936409c0c0b4429"} {"level":"debug","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"097584294f40a66ef8ff391a5f642599f2588e7fac553251f936409c0c0b4429","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/097584294f40a66ef8ff391a5f642599f2588e7fac553251f936409c0c0b4429"} {"level":"debug","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"097584294f40a66ef8ff391a5f642599f2588e7fac553251f936409c0c0b4429","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:10:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:10:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["097584294f40a66ef8ff391a5f642599f2588e7fac553251f936409c0c0b4429"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"097584294f40a66ef8ff391a5f642599f2588e7fac553251f936409c0c0b4429","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"097584294f40a66ef8ff391a5f642599f2588e7fac553251f936409c0c0b4429","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:10:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:10:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"097584294f40a66ef8ff391a5f642599f2588e7fac553251f936409c0c0b4429","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f4a1703447958cab3315055ee7e5a173e8aebd3d60d1917ee4b9e85fe668064","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:10:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:10:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/097584294f40a66ef8ff391a5f642599f2588e7fac553251f936409c0c0b4429"} {"level":"info","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f4a1703447958cab3315055ee7e5a173e8aebd3d60d1917ee4b9e85fe668064","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"097584294f40a66ef8ff391a5f642599f2588e7fac553251f936409c0c0b4429","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:10:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:10:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["097584294f40a66ef8ff391a5f642599f2588e7fac553251f936409c0c0b4429"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"097584294f40a66ef8ff391a5f642599f2588e7fac553251f936409c0c0b4429","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f4a1703447958cab3315055ee7e5a173e8aebd3d60d1917ee4b9e85fe668064","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:10:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:10:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f4a1703447958cab3315055ee7e5a173e8aebd3d60d1917ee4b9e85fe668064"} {"level":"info","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f4a1703447958cab3315055ee7e5a173e8aebd3d60d1917ee4b9e85fe668064","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"097584294f40a66ef8ff391a5f642599f2588e7fac553251f936409c0c0b4429","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:10:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:10:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"097584294f40a66ef8ff391a5f642599f2588e7fac553251f936409c0c0b4429","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f4a1703447958cab3315055ee7e5a173e8aebd3d60d1917ee4b9e85fe668064","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:10:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:10:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f4a1703447958cab3315055ee7e5a173e8aebd3d60d1917ee4b9e85fe668064"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f4a1703447958cab3315055ee7e5a173e8aebd3d60d1917ee4b9e85fe668064","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"097584294f40a66ef8ff391a5f642599f2588e7fac553251f936409c0c0b4429","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/097584294f40a66ef8ff391a5f642599f2588e7fac553251f936409c0c0b4429"} {"level":"debug","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f4a1703447958cab3315055ee7e5a173e8aebd3d60d1917ee4b9e85fe668064","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:10:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:10:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f4a1703447958cab3315055ee7e5a173e8aebd3d60d1917ee4b9e85fe668064","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"097584294f40a66ef8ff391a5f642599f2588e7fac553251f936409c0c0b4429","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:10:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:10:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["097584294f40a66ef8ff391a5f642599f2588e7fac553251f936409c0c0b4429"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f4a1703447958cab3315055ee7e5a173e8aebd3d60d1917ee4b9e85fe668064"} {"level":"info","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"097584294f40a66ef8ff391a5f642599f2588e7fac553251f936409c0c0b4429","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f4a1703447958cab3315055ee7e5a173e8aebd3d60d1917ee4b9e85fe668064","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:10:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:10:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f4a1703447958cab3315055ee7e5a173e8aebd3d60d1917ee4b9e85fe668064"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f4a1703447958cab3315055ee7e5a173e8aebd3d60d1917ee4b9e85fe668064","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/097584294f40a66ef8ff391a5f642599f2588e7fac553251f936409c0c0b4429"} {"level":"debug","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"097584294f40a66ef8ff391a5f642599f2588e7fac553251f936409c0c0b4429","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:10:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:10:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"097584294f40a66ef8ff391a5f642599f2588e7fac553251f936409c0c0b4429","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f4a1703447958cab3315055ee7e5a173e8aebd3d60d1917ee4b9e85fe668064","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:10:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:10:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f4a1703447958cab3315055ee7e5a173e8aebd3d60d1917ee4b9e85fe668064"} {"level":"info","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f4a1703447958cab3315055ee7e5a173e8aebd3d60d1917ee4b9e85fe668064","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"097584294f40a66ef8ff391a5f642599f2588e7fac553251f936409c0c0b4429","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f4a1703447958cab3315055ee7e5a173e8aebd3d60d1917ee4b9e85fe668064","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:10:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:10:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f4a1703447958cab3315055ee7e5a173e8aebd3d60d1917ee4b9e85fe668064"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/097584294f40a66ef8ff391a5f642599f2588e7fac553251f936409c0c0b4429"} {"level":"info","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f4a1703447958cab3315055ee7e5a173e8aebd3d60d1917ee4b9e85fe668064","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"097584294f40a66ef8ff391a5f642599f2588e7fac553251f936409c0c0b4429","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:10:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:10:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["097584294f40a66ef8ff391a5f642599f2588e7fac553251f936409c0c0b4429"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f4a1703447958cab3315055ee7e5a173e8aebd3d60d1917ee4b9e85fe668064"} {"level":"info","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"097584294f40a66ef8ff391a5f642599f2588e7fac553251f936409c0c0b4429","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7d11d33024053aff979c41ce75c55d65eff113a592688adf5cc5cc7fb48b70e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:10:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:10:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7d11d33024053aff979c41ce75c55d65eff113a592688adf5cc5cc7fb48b70e"} {"level":"info","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7d11d33024053aff979c41ce75c55d65eff113a592688adf5cc5cc7fb48b70e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f4a1703447958cab3315055ee7e5a173e8aebd3d60d1917ee4b9e85fe668064","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:10:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:10:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f4a1703447958cab3315055ee7e5a173e8aebd3d60d1917ee4b9e85fe668064","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"097584294f40a66ef8ff391a5f642599f2588e7fac553251f936409c0c0b4429","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7d11d33024053aff979c41ce75c55d65eff113a592688adf5cc5cc7fb48b70e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:10:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:10:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7d11d33024053aff979c41ce75c55d65eff113a592688adf5cc5cc7fb48b70e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f4a1703447958cab3315055ee7e5a173e8aebd3d60d1917ee4b9e85fe668064"} {"level":"info","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7d11d33024053aff979c41ce75c55d65eff113a592688adf5cc5cc7fb48b70e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f4a1703447958cab3315055ee7e5a173e8aebd3d60d1917ee4b9e85fe668064","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:10:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:10:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f4a1703447958cab3315055ee7e5a173e8aebd3d60d1917ee4b9e85fe668064"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/097584294f40a66ef8ff391a5f642599f2588e7fac553251f936409c0c0b4429"} {"level":"info","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f4a1703447958cab3315055ee7e5a173e8aebd3d60d1917ee4b9e85fe668064","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7d11d33024053aff979c41ce75c55d65eff113a592688adf5cc5cc7fb48b70e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:10:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:10:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7d11d33024053aff979c41ce75c55d65eff113a592688adf5cc5cc7fb48b70e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f4a1703447958cab3315055ee7e5a173e8aebd3d60d1917ee4b9e85fe668064","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7d11d33024053aff979c41ce75c55d65eff113a592688adf5cc5cc7fb48b70e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7d11d33024053aff979c41ce75c55d65eff113a592688adf5cc5cc7fb48b70e"} {"level":"debug","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7d11d33024053aff979c41ce75c55d65eff113a592688adf5cc5cc7fb48b70e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:10:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:10:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7d11d33024053aff979c41ce75c55d65eff113a592688adf5cc5cc7fb48b70e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7d11d33024053aff979c41ce75c55d65eff113a592688adf5cc5cc7fb48b70e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7d11d33024053aff979c41ce75c55d65eff113a592688adf5cc5cc7fb48b70e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f4a1703447958cab3315055ee7e5a173e8aebd3d60d1917ee4b9e85fe668064"} {"level":"info","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7d11d33024053aff979c41ce75c55d65eff113a592688adf5cc5cc7fb48b70e"} {"level":"debug","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1c9d5b05f94d0f58cd7caaeb0e508cfa4eb11658645a419874be64ec37c4310","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:10:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:10:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1c9d5b05f94d0f58cd7caaeb0e508cfa4eb11658645a419874be64ec37c4310","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1c9d5b05f94d0f58cd7caaeb0e508cfa4eb11658645a419874be64ec37c4310","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:10:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:10:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1c9d5b05f94d0f58cd7caaeb0e508cfa4eb11658645a419874be64ec37c4310"} {"level":"info","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1c9d5b05f94d0f58cd7caaeb0e508cfa4eb11658645a419874be64ec37c4310","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1c9d5b05f94d0f58cd7caaeb0e508cfa4eb11658645a419874be64ec37c4310","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:10:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:10:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1c9d5b05f94d0f58cd7caaeb0e508cfa4eb11658645a419874be64ec37c4310"} {"level":"error","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e1c9d5b05f94d0f58cd7caaeb0e508cfa4eb11658645a419874be64ec37c4310","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e1c9d5b05f94d0f58cd7caaeb0e508cfa4eb11658645a419874be64ec37c4310\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1c9d5b05f94d0f58cd7caaeb0e508cfa4eb11658645a419874be64ec37c4310","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1c9d5b05f94d0f58cd7caaeb0e508cfa4eb11658645a419874be64ec37c4310","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1c9d5b05f94d0f58cd7caaeb0e508cfa4eb11658645a419874be64ec37c4310"} {"level":"debug","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1c9d5b05f94d0f58cd7caaeb0e508cfa4eb11658645a419874be64ec37c4310","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:10:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:10:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1c9d5b05f94d0f58cd7caaeb0e508cfa4eb11658645a419874be64ec37c4310"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1c9d5b05f94d0f58cd7caaeb0e508cfa4eb11658645a419874be64ec37c4310","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1c9d5b05f94d0f58cd7caaeb0e508cfa4eb11658645a419874be64ec37c4310","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:10:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:10:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1c9d5b05f94d0f58cd7caaeb0e508cfa4eb11658645a419874be64ec37c4310","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1c9d5b05f94d0f58cd7caaeb0e508cfa4eb11658645a419874be64ec37c4310","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1c9d5b05f94d0f58cd7caaeb0e508cfa4eb11658645a419874be64ec37c4310","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1c9d5b05f94d0f58cd7caaeb0e508cfa4eb11658645a419874be64ec37c4310"} {"level":"debug","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1c9d5b05f94d0f58cd7caaeb0e508cfa4eb11658645a419874be64ec37c4310","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1c9d5b05f94d0f58cd7caaeb0e508cfa4eb11658645a419874be64ec37c4310"} {"level":"debug","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e713d4c0e297c0232a415098ce9155629c0e26d33f178428ddb53f12d626e6e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:10:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:10:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e713d4c0e297c0232a415098ce9155629c0e26d33f178428ddb53f12d626e6e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e713d4c0e297c0232a415098ce9155629c0e26d33f178428ddb53f12d626e6e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1c9d5b05f94d0f58cd7caaeb0e508cfa4eb11658645a419874be64ec37c4310","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:10:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:10:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1c9d5b05f94d0f58cd7caaeb0e508cfa4eb11658645a419874be64ec37c4310"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e713d4c0e297c0232a415098ce9155629c0e26d33f178428ddb53f12d626e6e4"} {"level":"info","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1c9d5b05f94d0f58cd7caaeb0e508cfa4eb11658645a419874be64ec37c4310","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e713d4c0e297c0232a415098ce9155629c0e26d33f178428ddb53f12d626e6e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1c9d5b05f94d0f58cd7caaeb0e508cfa4eb11658645a419874be64ec37c4310","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e713d4c0e297c0232a415098ce9155629c0e26d33f178428ddb53f12d626e6e4"} {"level":"debug","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e713d4c0e297c0232a415098ce9155629c0e26d33f178428ddb53f12d626e6e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:10:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:10:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e713d4c0e297c0232a415098ce9155629c0e26d33f178428ddb53f12d626e6e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1c9d5b05f94d0f58cd7caaeb0e508cfa4eb11658645a419874be64ec37c4310"} {"level":"info","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e713d4c0e297c0232a415098ce9155629c0e26d33f178428ddb53f12d626e6e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e713d4c0e297c0232a415098ce9155629c0e26d33f178428ddb53f12d626e6e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:10:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:10:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e713d4c0e297c0232a415098ce9155629c0e26d33f178428ddb53f12d626e6e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e713d4c0e297c0232a415098ce9155629c0e26d33f178428ddb53f12d626e6e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e713d4c0e297c0232a415098ce9155629c0e26d33f178428ddb53f12d626e6e4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e713d4c0e297c0232a415098ce9155629c0e26d33f178428ddb53f12d626e6e4"} {"level":"debug","ts":"2026-07-14T15:10:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18dc1beaefe5fc47b100b383d342298f16aee497657df3c33d680b7204fa01ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:10:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:10:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18dc1beaefe5fc47b100b383d342298f16aee497657df3c33d680b7204fa01ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e713d4c0e297c0232a415098ce9155629c0e26d33f178428ddb53f12d626e6e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18dc1beaefe5fc47b100b383d342298f16aee497657df3c33d680b7204fa01ae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e713d4c0e297c0232a415098ce9155629c0e26d33f178428ddb53f12d626e6e4"} {"level":"debug","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18dc1beaefe5fc47b100b383d342298f16aee497657df3c33d680b7204fa01ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:10:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:10:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18dc1beaefe5fc47b100b383d342298f16aee497657df3c33d680b7204fa01ae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18dc1beaefe5fc47b100b383d342298f16aee497657df3c33d680b7204fa01ae"} {"level":"debug","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18dc1beaefe5fc47b100b383d342298f16aee497657df3c33d680b7204fa01ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e713d4c0e297c0232a415098ce9155629c0e26d33f178428ddb53f12d626e6e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:10:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:10:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e713d4c0e297c0232a415098ce9155629c0e26d33f178428ddb53f12d626e6e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18dc1beaefe5fc47b100b383d342298f16aee497657df3c33d680b7204fa01ae"} {"level":"info","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e713d4c0e297c0232a415098ce9155629c0e26d33f178428ddb53f12d626e6e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18dc1beaefe5fc47b100b383d342298f16aee497657df3c33d680b7204fa01ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e713d4c0e297c0232a415098ce9155629c0e26d33f178428ddb53f12d626e6e4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18dc1beaefe5fc47b100b383d342298f16aee497657df3c33d680b7204fa01ae"} {"level":"info","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e713d4c0e297c0232a415098ce9155629c0e26d33f178428ddb53f12d626e6e4"} {"level":"debug","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ad3d2963286dfc8bb82452471e5fb70b183e3b27645dfc66d8353a5b2fe03bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:10:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:10:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ad3d2963286dfc8bb82452471e5fb70b183e3b27645dfc66d8353a5b2fe03bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ad3d2963286dfc8bb82452471e5fb70b183e3b27645dfc66d8353a5b2fe03bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:10:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:10:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ad3d2963286dfc8bb82452471e5fb70b183e3b27645dfc66d8353a5b2fe03bc"} {"level":"info","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ad3d2963286dfc8bb82452471e5fb70b183e3b27645dfc66d8353a5b2fe03bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ad3d2963286dfc8bb82452471e5fb70b183e3b27645dfc66d8353a5b2fe03bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:10:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:10:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9ad3d2963286dfc8bb82452471e5fb70b183e3b27645dfc66d8353a5b2fe03bc","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9ad3d2963286dfc8bb82452471e5fb70b183e3b27645dfc66d8353a5b2fe03bc\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ad3d2963286dfc8bb82452471e5fb70b183e3b27645dfc66d8353a5b2fe03bc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ad3d2963286dfc8bb82452471e5fb70b183e3b27645dfc66d8353a5b2fe03bc"} {"level":"debug","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ad3d2963286dfc8bb82452471e5fb70b183e3b27645dfc66d8353a5b2fe03bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18dc1beaefe5fc47b100b383d342298f16aee497657df3c33d680b7204fa01ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:10:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:10:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18dc1beaefe5fc47b100b383d342298f16aee497657df3c33d680b7204fa01ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ad3d2963286dfc8bb82452471e5fb70b183e3b27645dfc66d8353a5b2fe03bc"} {"level":"info","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18dc1beaefe5fc47b100b383d342298f16aee497657df3c33d680b7204fa01ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18dc1beaefe5fc47b100b383d342298f16aee497657df3c33d680b7204fa01ae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18dc1beaefe5fc47b100b383d342298f16aee497657df3c33d680b7204fa01ae"} {"level":"debug","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ca7c777d097e2e012abe92d6a65f16a1eab7c1131ee139c437be77607627ab4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:10:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:10:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ca7c777d097e2e012abe92d6a65f16a1eab7c1131ee139c437be77607627ab4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"625b92f703b6a7def9905def4f73eb6ef9c62036954fd0a9b3483dc3b9e34239","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:10:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:10:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ca7c777d097e2e012abe92d6a65f16a1eab7c1131ee139c437be77607627ab4"} {"level":"info","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"625b92f703b6a7def9905def4f73eb6ef9c62036954fd0a9b3483dc3b9e34239","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ca7c777d097e2e012abe92d6a65f16a1eab7c1131ee139c437be77607627ab4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:10:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:10:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ca7c777d097e2e012abe92d6a65f16a1eab7c1131ee139c437be77607627ab4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/625b92f703b6a7def9905def4f73eb6ef9c62036954fd0a9b3483dc3b9e34239"} {"level":"info","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ca7c777d097e2e012abe92d6a65f16a1eab7c1131ee139c437be77607627ab4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ad3d2963286dfc8bb82452471e5fb70b183e3b27645dfc66d8353a5b2fe03bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:10:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:10:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ad3d2963286dfc8bb82452471e5fb70b183e3b27645dfc66d8353a5b2fe03bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ad3d2963286dfc8bb82452471e5fb70b183e3b27645dfc66d8353a5b2fe03bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec6405602db5c2a63446e64913c6ea49242a9560279cedef1ace5dfd48504b99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:10:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:10:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ca7c777d097e2e012abe92d6a65f16a1eab7c1131ee139c437be77607627ab4"} {"level":"info","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec6405602db5c2a63446e64913c6ea49242a9560279cedef1ace5dfd48504b99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"625b92f703b6a7def9905def4f73eb6ef9c62036954fd0a9b3483dc3b9e34239","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:10:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:10:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["625b92f703b6a7def9905def4f73eb6ef9c62036954fd0a9b3483dc3b9e34239"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec6405602db5c2a63446e64913c6ea49242a9560279cedef1ace5dfd48504b99"} {"level":"info","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"625b92f703b6a7def9905def4f73eb6ef9c62036954fd0a9b3483dc3b9e34239","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ca7c777d097e2e012abe92d6a65f16a1eab7c1131ee139c437be77607627ab4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ad3d2963286dfc8bb82452471e5fb70b183e3b27645dfc66d8353a5b2fe03bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec6405602db5c2a63446e64913c6ea49242a9560279cedef1ace5dfd48504b99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:10:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:10:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec6405602db5c2a63446e64913c6ea49242a9560279cedef1ace5dfd48504b99"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec6405602db5c2a63446e64913c6ea49242a9560279cedef1ace5dfd48504b99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"625b92f703b6a7def9905def4f73eb6ef9c62036954fd0a9b3483dc3b9e34239","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:10:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:10:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/625b92f703b6a7def9905def4f73eb6ef9c62036954fd0a9b3483dc3b9e34239"} {"level":"info","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"625b92f703b6a7def9905def4f73eb6ef9c62036954fd0a9b3483dc3b9e34239","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bef8630fe1b493fc0f8a49fc2a9958213d1907ddb245ecbda9ebb6084dbc985d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:10:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:10:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bef8630fe1b493fc0f8a49fc2a9958213d1907ddb245ecbda9ebb6084dbc985d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec6405602db5c2a63446e64913c6ea49242a9560279cedef1ace5dfd48504b99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28aa1448daedcbf487763a3ecb505848171ea0c754cc36b45478825e587d91ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:10:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:10:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ad3d2963286dfc8bb82452471e5fb70b183e3b27645dfc66d8353a5b2fe03bc"} {"level":"info","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28aa1448daedcbf487763a3ecb505848171ea0c754cc36b45478825e587d91ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"625b92f703b6a7def9905def4f73eb6ef9c62036954fd0a9b3483dc3b9e34239","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:10:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:10:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["625b92f703b6a7def9905def4f73eb6ef9c62036954fd0a9b3483dc3b9e34239"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"625b92f703b6a7def9905def4f73eb6ef9c62036954fd0a9b3483dc3b9e34239","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bef8630fe1b493fc0f8a49fc2a9958213d1907ddb245ecbda9ebb6084dbc985d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28aa1448daedcbf487763a3ecb505848171ea0c754cc36b45478825e587d91ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"625b92f703b6a7def9905def4f73eb6ef9c62036954fd0a9b3483dc3b9e34239","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ca7c777d097e2e012abe92d6a65f16a1eab7c1131ee139c437be77607627ab4"} {"level":"debug","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bef8630fe1b493fc0f8a49fc2a9958213d1907ddb245ecbda9ebb6084dbc985d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28aa1448daedcbf487763a3ecb505848171ea0c754cc36b45478825e587d91ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bef8630fe1b493fc0f8a49fc2a9958213d1907ddb245ecbda9ebb6084dbc985d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28aa1448daedcbf487763a3ecb505848171ea0c754cc36b45478825e587d91ba","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec6405602db5c2a63446e64913c6ea49242a9560279cedef1ace5dfd48504b99"} {"level":"info","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bef8630fe1b493fc0f8a49fc2a9958213d1907ddb245ecbda9ebb6084dbc985d"} {"level":"debug","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bef8630fe1b493fc0f8a49fc2a9958213d1907ddb245ecbda9ebb6084dbc985d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:10:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:10:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bef8630fe1b493fc0f8a49fc2a9958213d1907ddb245ecbda9ebb6084dbc985d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/625b92f703b6a7def9905def4f73eb6ef9c62036954fd0a9b3483dc3b9e34239"} {"level":"info","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bef8630fe1b493fc0f8a49fc2a9958213d1907ddb245ecbda9ebb6084dbc985d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28aa1448daedcbf487763a3ecb505848171ea0c754cc36b45478825e587d91ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:10:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:10:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28aa1448daedcbf487763a3ecb505848171ea0c754cc36b45478825e587d91ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bef8630fe1b493fc0f8a49fc2a9958213d1907ddb245ecbda9ebb6084dbc985d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28aa1448daedcbf487763a3ecb505848171ea0c754cc36b45478825e587d91ba","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28aa1448daedcbf487763a3ecb505848171ea0c754cc36b45478825e587d91ba"} {"level":"info","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bef8630fe1b493fc0f8a49fc2a9958213d1907ddb245ecbda9ebb6084dbc985d"} {"level":"debug","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28aa1448daedcbf487763a3ecb505848171ea0c754cc36b45478825e587d91ba","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28aa1448daedcbf487763a3ecb505848171ea0c754cc36b45478825e587d91ba"} {"level":"debug","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28aa1448daedcbf487763a3ecb505848171ea0c754cc36b45478825e587d91ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:10:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:10:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28aa1448daedcbf487763a3ecb505848171ea0c754cc36b45478825e587d91ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28aa1448daedcbf487763a3ecb505848171ea0c754cc36b45478825e587d91ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28aa1448daedcbf487763a3ecb505848171ea0c754cc36b45478825e587d91ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:10:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:10:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28aa1448daedcbf487763a3ecb505848171ea0c754cc36b45478825e587d91ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28aa1448daedcbf487763a3ecb505848171ea0c754cc36b45478825e587d91ba","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28aa1448daedcbf487763a3ecb505848171ea0c754cc36b45478825e587d91ba"} {"level":"debug","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28aa1448daedcbf487763a3ecb505848171ea0c754cc36b45478825e587d91ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28aa1448daedcbf487763a3ecb505848171ea0c754cc36b45478825e587d91ba","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28aa1448daedcbf487763a3ecb505848171ea0c754cc36b45478825e587d91ba"} {"level":"debug","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28aa1448daedcbf487763a3ecb505848171ea0c754cc36b45478825e587d91ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:10:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:10:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28aa1448daedcbf487763a3ecb505848171ea0c754cc36b45478825e587d91ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28aa1448daedcbf487763a3ecb505848171ea0c754cc36b45478825e587d91ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28aa1448daedcbf487763a3ecb505848171ea0c754cc36b45478825e587d91ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:10:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:10:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28aa1448daedcbf487763a3ecb505848171ea0c754cc36b45478825e587d91ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28aa1448daedcbf487763a3ecb505848171ea0c754cc36b45478825e587d91ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28aa1448daedcbf487763a3ecb505848171ea0c754cc36b45478825e587d91ba","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28aa1448daedcbf487763a3ecb505848171ea0c754cc36b45478825e587d91ba"} {"level":"debug","ts":"2026-07-14T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28aa1448daedcbf487763a3ecb505848171ea0c754cc36b45478825e587d91ba","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28aa1448daedcbf487763a3ecb505848171ea0c754cc36b45478825e587d91ba"} {"level":"debug","ts":"2026-07-14T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28aa1448daedcbf487763a3ecb505848171ea0c754cc36b45478825e587d91ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:10:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:10:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28aa1448daedcbf487763a3ecb505848171ea0c754cc36b45478825e587d91ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28aa1448daedcbf487763a3ecb505848171ea0c754cc36b45478825e587d91ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28aa1448daedcbf487763a3ecb505848171ea0c754cc36b45478825e587d91ba","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28aa1448daedcbf487763a3ecb505848171ea0c754cc36b45478825e587d91ba"} {"level":"info","ts":"2026-07-14T15:10:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57e31e81-ef18-4690-9173-dc710562b7d7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:48248","PortSpecifier":{"PortValue":48248}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"57e31e81-ef18-4690-9173-dc710562b7d7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ebb1a4.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T15:10:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57e31e81-ef18-4690-9173-dc710562b7d7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:48248","PortSpecifier":{"PortValue":48248}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784041848,"nanos":383017357},"http":{"id":"57e31e81-ef18-4690-9173-dc710562b7d7","method":"POST","headers":{":authority":"e2e-shared-a-ebb1a4.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T15:10:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"57e31e81-ef18-4690-9173-dc710562b7d7","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T15:10:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"57e31e81-ef18-4690-9173-dc710562b7d7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c34cfb71-3058-4b32-8f33-e0d6d7dad951","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a225cdb-1660-4d55-bdaf-f564f742244d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f6461cc0c70f"]}} {"level":"debug","ts":"2026-07-14T15:10:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"57e31e81-ef18-4690-9173-dc710562b7d7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f6461cc0c70f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a225cdb-1660-4d55-bdaf-f564f742244d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c34cfb71-3058-4b32-8f33-e0d6d7dad951","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c869ed378b6eee38de6e0dc2b1bab7f0abdb1f511f03c708da07d5124d80181f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ebb1a4.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T15:10:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57e31e81-ef18-4690-9173-dc710562b7d7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:10:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57e31e81-ef18-4690-9173-dc710562b7d7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:10:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57e31e81-ef18-4690-9173-dc710562b7d7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ebb1a4/auth-test-model-ebb1a4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ebb1a4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:10:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"57e31e81-ef18-4690-9173-dc710562b7d7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T15:10:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57e31e81-ef18-4690-9173-dc710562b7d7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T15:10:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57e31e81-ef18-4690-9173-dc710562b7d7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T15:10:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57e31e81-ef18-4690-9173-dc710562b7d7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T15:10:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57e31e81-ef18-4690-9173-dc710562b7d7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T15:10:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6bbdd360-2881-43c3-a01c-8d7a35e4c72d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:45608","PortSpecifier":{"PortValue":45608}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6bbdd360-2881-43c3-a01c-8d7a35e4c72d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-747ac7.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T15:10:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6bbdd360-2881-43c3-a01c-8d7a35e4c72d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:45608","PortSpecifier":{"PortValue":45608}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784041848,"nanos":444341369},"http":{"id":"6bbdd360-2881-43c3-a01c-8d7a35e4c72d","method":"POST","headers":{":authority":"e2e-shared-b-747ac7.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T15:10:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6bbdd360-2881-43c3-a01c-8d7a35e4c72d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T15:10:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6bbdd360-2881-43c3-a01c-8d7a35e4c72d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c34cfb71-3058-4b32-8f33-e0d6d7dad951","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a225cdb-1660-4d55-bdaf-f564f742244d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f6461cc0c70f"]}} {"level":"debug","ts":"2026-07-14T15:10:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6bbdd360-2881-43c3-a01c-8d7a35e4c72d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f6461cc0c70f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a225cdb-1660-4d55-bdaf-f564f742244d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c34cfb71-3058-4b32-8f33-e0d6d7dad951","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4f4a1703447958cab3315055ee7e5a173e8aebd3d60d1917ee4b9e85fe668064"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-747ac7.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T15:10:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6bbdd360-2881-43c3-a01c-8d7a35e4c72d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:10:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6bbdd360-2881-43c3-a01c-8d7a35e4c72d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:10:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6bbdd360-2881-43c3-a01c-8d7a35e4c72d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-747ac7/auth-test-model-747ac7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-747ac7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:10:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6bbdd360-2881-43c3-a01c-8d7a35e4c72d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T15:10:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6bbdd360-2881-43c3-a01c-8d7a35e4c72d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T15:10:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6bbdd360-2881-43c3-a01c-8d7a35e4c72d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T15:10:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6bbdd360-2881-43c3-a01c-8d7a35e4c72d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T15:10:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6bbdd360-2881-43c3-a01c-8d7a35e4c72d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T15:10:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"98ee5042-5a56-485b-b8fb-8806674fd88b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:48254","PortSpecifier":{"PortValue":48254}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"98ee5042-5a56-485b-b8fb-8806674fd88b","method":"GET","path":"/maas-api/v1/api-keys/8548b5a7-f929-4b0b-9d1a-f2843518ba29","host":"e2e-shared-a-ebb1a4.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T15:10:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"98ee5042-5a56-485b-b8fb-8806674fd88b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:48254","PortSpecifier":{"PortValue":48254}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784041848,"nanos":510009689},"http":{"id":"98ee5042-5a56-485b-b8fb-8806674fd88b","method":"GET","headers":{":authority":"e2e-shared-a-ebb1a4.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/8548b5a7-f929-4b0b-9d1a-f2843518ba29",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T15:10:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"98ee5042-5a56-485b-b8fb-8806674fd88b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T15:10:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"98ee5042-5a56-485b-b8fb-8806674fd88b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c34cfb71-3058-4b32-8f33-e0d6d7dad951","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a225cdb-1660-4d55-bdaf-f564f742244d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f6461cc0c70f"]}} {"level":"debug","ts":"2026-07-14T15:10:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"98ee5042-5a56-485b-b8fb-8806674fd88b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f6461cc0c70f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a225cdb-1660-4d55-bdaf-f564f742244d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c34cfb71-3058-4b32-8f33-e0d6d7dad951","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c869ed378b6eee38de6e0dc2b1bab7f0abdb1f511f03c708da07d5124d80181f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ebb1a4.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/8548b5a7-f929-4b0b-9d1a-f2843518ba29",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T15:10:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"98ee5042-5a56-485b-b8fb-8806674fd88b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:10:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"98ee5042-5a56-485b-b8fb-8806674fd88b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:10:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"98ee5042-5a56-485b-b8fb-8806674fd88b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ebb1a4/auth-test-model-ebb1a4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ebb1a4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:10:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"98ee5042-5a56-485b-b8fb-8806674fd88b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T15:10:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"98ee5042-5a56-485b-b8fb-8806674fd88b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T15:10:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"98ee5042-5a56-485b-b8fb-8806674fd88b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T15:10:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"98ee5042-5a56-485b-b8fb-8806674fd88b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T15:10:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"98ee5042-5a56-485b-b8fb-8806674fd88b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T15:10:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d208ea4-9a4d-448d-be8e-b6ed34ddb883","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:45610","PortSpecifier":{"PortValue":45610}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0d208ea4-9a4d-448d-be8e-b6ed34ddb883","method":"GET","path":"/maas-api/v1/api-keys/4d5c7a9e-ba69-4121-872f-463d5f259c64","host":"e2e-shared-b-747ac7.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T15:10:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d208ea4-9a4d-448d-be8e-b6ed34ddb883","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:45610","PortSpecifier":{"PortValue":45610}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784041848,"nanos":549405526},"http":{"id":"0d208ea4-9a4d-448d-be8e-b6ed34ddb883","method":"GET","headers":{":authority":"e2e-shared-b-747ac7.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/4d5c7a9e-ba69-4121-872f-463d5f259c64",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T15:10:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0d208ea4-9a4d-448d-be8e-b6ed34ddb883","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T15:10:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0d208ea4-9a4d-448d-be8e-b6ed34ddb883","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c34cfb71-3058-4b32-8f33-e0d6d7dad951","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a225cdb-1660-4d55-bdaf-f564f742244d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f6461cc0c70f"]}} {"level":"debug","ts":"2026-07-14T15:10:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0d208ea4-9a4d-448d-be8e-b6ed34ddb883","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f6461cc0c70f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a225cdb-1660-4d55-bdaf-f564f742244d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c34cfb71-3058-4b32-8f33-e0d6d7dad951","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4f4a1703447958cab3315055ee7e5a173e8aebd3d60d1917ee4b9e85fe668064"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-747ac7.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/4d5c7a9e-ba69-4121-872f-463d5f259c64",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T15:10:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d208ea4-9a4d-448d-be8e-b6ed34ddb883","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:10:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d208ea4-9a4d-448d-be8e-b6ed34ddb883","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:10:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d208ea4-9a4d-448d-be8e-b6ed34ddb883","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-747ac7/auth-test-model-747ac7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-747ac7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:10:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0d208ea4-9a4d-448d-be8e-b6ed34ddb883","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T15:10:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d208ea4-9a4d-448d-be8e-b6ed34ddb883","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T15:10:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d208ea4-9a4d-448d-be8e-b6ed34ddb883","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T15:10:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d208ea4-9a4d-448d-be8e-b6ed34ddb883","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T15:10:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d208ea4-9a4d-448d-be8e-b6ed34ddb883","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T15:11:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0377635b-43ba-4ef4-82bd-a07ffbf71ec4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:57344","PortSpecifier":{"PortValue":57344}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0377635b-43ba-4ef4-82bd-a07ffbf71ec4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ebb1a4.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T15:11:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0377635b-43ba-4ef4-82bd-a07ffbf71ec4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:57344","PortSpecifier":{"PortValue":57344}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784041865,"nanos":943979453},"http":{"id":"0377635b-43ba-4ef4-82bd-a07ffbf71ec4","method":"POST","headers":{":authority":"e2e-shared-a-ebb1a4.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T15:11:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0377635b-43ba-4ef4-82bd-a07ffbf71ec4","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T15:11:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0377635b-43ba-4ef4-82bd-a07ffbf71ec4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c34cfb71-3058-4b32-8f33-e0d6d7dad951","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a225cdb-1660-4d55-bdaf-f564f742244d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f6461cc0c70f"]}} {"level":"debug","ts":"2026-07-14T15:11:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0377635b-43ba-4ef4-82bd-a07ffbf71ec4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f6461cc0c70f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a225cdb-1660-4d55-bdaf-f564f742244d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c34cfb71-3058-4b32-8f33-e0d6d7dad951","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c869ed378b6eee38de6e0dc2b1bab7f0abdb1f511f03c708da07d5124d80181f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ebb1a4.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T15:11:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0377635b-43ba-4ef4-82bd-a07ffbf71ec4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:11:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0377635b-43ba-4ef4-82bd-a07ffbf71ec4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:11:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0377635b-43ba-4ef4-82bd-a07ffbf71ec4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ebb1a4/auth-test-model-ebb1a4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ebb1a4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:11:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0377635b-43ba-4ef4-82bd-a07ffbf71ec4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T15:11:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0377635b-43ba-4ef4-82bd-a07ffbf71ec4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T15:11:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0377635b-43ba-4ef4-82bd-a07ffbf71ec4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T15:11:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0377635b-43ba-4ef4-82bd-a07ffbf71ec4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T15:11:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0377635b-43ba-4ef4-82bd-a07ffbf71ec4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T15:11:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2a7f4759-2607-4304-90df-973f208217ca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:33454","PortSpecifier":{"PortValue":33454}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2a7f4759-2607-4304-90df-973f208217ca","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-747ac7.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T15:11:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2a7f4759-2607-4304-90df-973f208217ca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:33454","PortSpecifier":{"PortValue":33454}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784041865,"nanos":980257779},"http":{"id":"2a7f4759-2607-4304-90df-973f208217ca","method":"POST","headers":{":authority":"e2e-shared-b-747ac7.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T15:11:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2a7f4759-2607-4304-90df-973f208217ca","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T15:11:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2a7f4759-2607-4304-90df-973f208217ca","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c34cfb71-3058-4b32-8f33-e0d6d7dad951","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a225cdb-1660-4d55-bdaf-f564f742244d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f6461cc0c70f"]}} {"level":"debug","ts":"2026-07-14T15:11:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2a7f4759-2607-4304-90df-973f208217ca","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f6461cc0c70f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a225cdb-1660-4d55-bdaf-f564f742244d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c34cfb71-3058-4b32-8f33-e0d6d7dad951","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4f4a1703447958cab3315055ee7e5a173e8aebd3d60d1917ee4b9e85fe668064"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-747ac7.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T15:11:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a7f4759-2607-4304-90df-973f208217ca","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:11:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a7f4759-2607-4304-90df-973f208217ca","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:11:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a7f4759-2607-4304-90df-973f208217ca","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-747ac7/auth-test-model-747ac7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-747ac7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:11:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2a7f4759-2607-4304-90df-973f208217ca","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T15:11:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a7f4759-2607-4304-90df-973f208217ca","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T15:11:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a7f4759-2607-4304-90df-973f208217ca","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T15:11:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2a7f4759-2607-4304-90df-973f208217ca","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T15:11:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2a7f4759-2607-4304-90df-973f208217ca","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T15:11:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"76148fed-b4e0-498a-af13-048bfd195871","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:57348","PortSpecifier":{"PortValue":57348}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"76148fed-b4e0-498a-af13-048bfd195871","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-ebb1a4.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T15:11:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"76148fed-b4e0-498a-af13-048bfd195871","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:57348","PortSpecifier":{"PortValue":57348}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784041866,"nanos":20411168},"http":{"id":"76148fed-b4e0-498a-af13-048bfd195871","method":"GET","headers":{":authority":"e2e-shared-a-ebb1a4.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T15:11:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"76148fed-b4e0-498a-af13-048bfd195871","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-EW14yUZ0DFBGkIF3_nUQ4ebEXZDKdl0nYXIAbmBTPhCEakmFRIT26HVwCHNr"} {"level":"debug","ts":"2026-07-14T15:11:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"76148fed-b4e0-498a-af13-048bfd195871","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ebb1a4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-EW14yUZ0DFBGkIF3_nUQ4ebEXZDKdl0nYXIAbmBTPhCEakmFRIT26HVwCHNr\"}"} {"level":"debug","ts":"2026-07-14T15:11:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"76148fed-b4e0-498a-af13-048bfd195871","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ebb1a4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"737f1758-53fa-4dce-8414-ce654a197249","keyName":"e2e-auth-iso-a-2d761f","subscription":"e2e-auth-iso-b282a7","tenant":"e2e-shared-a-ebb1a4","userId":"737f1758-53fa-4dce-8414-ce654a197249","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T15:11:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"76148fed-b4e0-498a-af13-048bfd195871","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T15:11:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76148fed-b4e0-498a-af13-048bfd195871","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:11:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76148fed-b4e0-498a-af13-048bfd195871","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:11:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76148fed-b4e0-498a-af13-048bfd195871","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ebb1a4/auth-test-model-ebb1a4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ebb1a4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:11:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"76148fed-b4e0-498a-af13-048bfd195871","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T15:11:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"76148fed-b4e0-498a-af13-048bfd195871","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T15:11:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"76148fed-b4e0-498a-af13-048bfd195871","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-b282a7"} {"level":"debug","ts":"2026-07-14T15:11:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"76148fed-b4e0-498a-af13-048bfd195871","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-14T15:11:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"76148fed-b4e0-498a-af13-048bfd195871","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T15:11:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"76148fed-b4e0-498a-af13-048bfd195871","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T15:11:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3899ab7f-c09c-44d6-9a4d-5ac9b12d0cda","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:52600","PortSpecifier":{"PortValue":52600}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3899ab7f-c09c-44d6-9a4d-5ac9b12d0cda","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ebb1a4.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T15:11:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3899ab7f-c09c-44d6-9a4d-5ac9b12d0cda","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:52600","PortSpecifier":{"PortValue":52600}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784041883,"nanos":305344752},"http":{"id":"3899ab7f-c09c-44d6-9a4d-5ac9b12d0cda","method":"POST","headers":{":authority":"e2e-shared-a-ebb1a4.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T15:11:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3899ab7f-c09c-44d6-9a4d-5ac9b12d0cda","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T15:11:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3899ab7f-c09c-44d6-9a4d-5ac9b12d0cda","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c34cfb71-3058-4b32-8f33-e0d6d7dad951","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a225cdb-1660-4d55-bdaf-f564f742244d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f6461cc0c70f"]}} {"level":"debug","ts":"2026-07-14T15:11:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3899ab7f-c09c-44d6-9a4d-5ac9b12d0cda","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f6461cc0c70f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a225cdb-1660-4d55-bdaf-f564f742244d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c34cfb71-3058-4b32-8f33-e0d6d7dad951","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c869ed378b6eee38de6e0dc2b1bab7f0abdb1f511f03c708da07d5124d80181f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ebb1a4.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T15:11:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3899ab7f-c09c-44d6-9a4d-5ac9b12d0cda","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:11:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3899ab7f-c09c-44d6-9a4d-5ac9b12d0cda","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:11:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3899ab7f-c09c-44d6-9a4d-5ac9b12d0cda","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ebb1a4/auth-test-model-ebb1a4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ebb1a4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:11:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3899ab7f-c09c-44d6-9a4d-5ac9b12d0cda","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T15:11:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3899ab7f-c09c-44d6-9a4d-5ac9b12d0cda","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T15:11:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3899ab7f-c09c-44d6-9a4d-5ac9b12d0cda","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T15:11:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3899ab7f-c09c-44d6-9a4d-5ac9b12d0cda","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T15:11:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3899ab7f-c09c-44d6-9a4d-5ac9b12d0cda","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T15:11:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"036fdcfd-7f33-4eb6-8bcf-4a6b8642be47","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:38762","PortSpecifier":{"PortValue":38762}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"036fdcfd-7f33-4eb6-8bcf-4a6b8642be47","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-747ac7.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T15:11:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"036fdcfd-7f33-4eb6-8bcf-4a6b8642be47","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:38762","PortSpecifier":{"PortValue":38762}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784041883,"nanos":339831121},"http":{"id":"036fdcfd-7f33-4eb6-8bcf-4a6b8642be47","method":"POST","headers":{":authority":"e2e-shared-b-747ac7.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T15:11:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"036fdcfd-7f33-4eb6-8bcf-4a6b8642be47","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T15:11:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"036fdcfd-7f33-4eb6-8bcf-4a6b8642be47","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c34cfb71-3058-4b32-8f33-e0d6d7dad951","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a225cdb-1660-4d55-bdaf-f564f742244d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f6461cc0c70f"]}} {"level":"debug","ts":"2026-07-14T15:11:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"036fdcfd-7f33-4eb6-8bcf-4a6b8642be47","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f6461cc0c70f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a225cdb-1660-4d55-bdaf-f564f742244d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c34cfb71-3058-4b32-8f33-e0d6d7dad951","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4f4a1703447958cab3315055ee7e5a173e8aebd3d60d1917ee4b9e85fe668064"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-747ac7.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T15:11:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"036fdcfd-7f33-4eb6-8bcf-4a6b8642be47","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:11:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"036fdcfd-7f33-4eb6-8bcf-4a6b8642be47","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:11:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"036fdcfd-7f33-4eb6-8bcf-4a6b8642be47","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-747ac7/auth-test-model-747ac7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-747ac7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:11:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"036fdcfd-7f33-4eb6-8bcf-4a6b8642be47","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T15:11:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"036fdcfd-7f33-4eb6-8bcf-4a6b8642be47","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T15:11:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"036fdcfd-7f33-4eb6-8bcf-4a6b8642be47","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T15:11:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"036fdcfd-7f33-4eb6-8bcf-4a6b8642be47","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T15:11:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"036fdcfd-7f33-4eb6-8bcf-4a6b8642be47","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T15:11:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8810d563-0cd9-43f3-a18f-961994578f26","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:38776","PortSpecifier":{"PortValue":38776}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8810d563-0cd9-43f3-a18f-961994578f26","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-747ac7.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T15:11:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8810d563-0cd9-43f3-a18f-961994578f26","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:38776","PortSpecifier":{"PortValue":38776}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784041883,"nanos":376005048},"http":{"id":"8810d563-0cd9-43f3-a18f-961994578f26","method":"GET","headers":{":authority":"e2e-shared-b-747ac7.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T15:11:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8810d563-0cd9-43f3-a18f-961994578f26","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1V9IYsDFpgr3Oe62q_OKT78qKY22uPJNlDpOOHSTDv1VD9QFhh4QQHkzieylp"} {"level":"debug","ts":"2026-07-14T15:11:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8810d563-0cd9-43f3-a18f-961994578f26","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-747ac7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1V9IYsDFpgr3Oe62q_OKT78qKY22uPJNlDpOOHSTDv1VD9QFhh4QQHkzieylp\"}"} {"level":"debug","ts":"2026-07-14T15:11:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8810d563-0cd9-43f3-a18f-961994578f26","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-747ac7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-14T15:11:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8810d563-0cd9-43f3-a18f-961994578f26","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"4f4a1703447958cab3315055ee7e5a173e8aebd3d60d1917ee4b9e85fe668064"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-747ac7.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T15:11:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8810d563-0cd9-43f3-a18f-961994578f26","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:11:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"8810d563-0cd9-43f3-a18f-961994578f26","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-14T15:11:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8810d563-0cd9-43f3-a18f-961994578f26","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-14T15:11:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8810d563-0cd9-43f3-a18f-961994578f26","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"x-ext-auth-reason":""},{"content-type":"text/plain"}]}} {"level":"info","ts":"2026-07-14T15:11:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"72691d69-e321-4ddf-b4f3-d92a50d3a0c5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:50596","PortSpecifier":{"PortValue":50596}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"72691d69-e321-4ddf-b4f3-d92a50d3a0c5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ebb1a4.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T15:11:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"72691d69-e321-4ddf-b4f3-d92a50d3a0c5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:50596","PortSpecifier":{"PortValue":50596}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784041898,"nanos":537698054},"http":{"id":"72691d69-e321-4ddf-b4f3-d92a50d3a0c5","method":"POST","headers":{":authority":"e2e-shared-a-ebb1a4.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T15:11:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"72691d69-e321-4ddf-b4f3-d92a50d3a0c5","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T15:11:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"72691d69-e321-4ddf-b4f3-d92a50d3a0c5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c34cfb71-3058-4b32-8f33-e0d6d7dad951","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a225cdb-1660-4d55-bdaf-f564f742244d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f6461cc0c70f"]}} {"level":"debug","ts":"2026-07-14T15:11:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"72691d69-e321-4ddf-b4f3-d92a50d3a0c5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f6461cc0c70f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a225cdb-1660-4d55-bdaf-f564f742244d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c34cfb71-3058-4b32-8f33-e0d6d7dad951","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c869ed378b6eee38de6e0dc2b1bab7f0abdb1f511f03c708da07d5124d80181f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ebb1a4.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T15:11:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72691d69-e321-4ddf-b4f3-d92a50d3a0c5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:11:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72691d69-e321-4ddf-b4f3-d92a50d3a0c5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:11:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72691d69-e321-4ddf-b4f3-d92a50d3a0c5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ebb1a4/auth-test-model-ebb1a4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ebb1a4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:11:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"72691d69-e321-4ddf-b4f3-d92a50d3a0c5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T15:11:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72691d69-e321-4ddf-b4f3-d92a50d3a0c5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T15:11:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72691d69-e321-4ddf-b4f3-d92a50d3a0c5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T15:11:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"72691d69-e321-4ddf-b4f3-d92a50d3a0c5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T15:11:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"72691d69-e321-4ddf-b4f3-d92a50d3a0c5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T15:11:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f862e685-f923-4e95-800b-1904b3220efc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:45998","PortSpecifier":{"PortValue":45998}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f862e685-f923-4e95-800b-1904b3220efc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-747ac7.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T15:11:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f862e685-f923-4e95-800b-1904b3220efc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:45998","PortSpecifier":{"PortValue":45998}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784041898,"nanos":575185993},"http":{"id":"f862e685-f923-4e95-800b-1904b3220efc","method":"POST","headers":{":authority":"e2e-shared-b-747ac7.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T15:11:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f862e685-f923-4e95-800b-1904b3220efc","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T15:11:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f862e685-f923-4e95-800b-1904b3220efc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c34cfb71-3058-4b32-8f33-e0d6d7dad951","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a225cdb-1660-4d55-bdaf-f564f742244d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f6461cc0c70f"]}} {"level":"debug","ts":"2026-07-14T15:11:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f862e685-f923-4e95-800b-1904b3220efc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f6461cc0c70f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a225cdb-1660-4d55-bdaf-f564f742244d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c34cfb71-3058-4b32-8f33-e0d6d7dad951","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4f4a1703447958cab3315055ee7e5a173e8aebd3d60d1917ee4b9e85fe668064"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-747ac7.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T15:11:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f862e685-f923-4e95-800b-1904b3220efc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:11:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f862e685-f923-4e95-800b-1904b3220efc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:11:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f862e685-f923-4e95-800b-1904b3220efc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-747ac7/auth-test-model-747ac7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-747ac7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:11:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f862e685-f923-4e95-800b-1904b3220efc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T15:11:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f862e685-f923-4e95-800b-1904b3220efc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T15:11:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f862e685-f923-4e95-800b-1904b3220efc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T15:11:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f862e685-f923-4e95-800b-1904b3220efc","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T15:11:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f862e685-f923-4e95-800b-1904b3220efc","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T15:11:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3c2a71e2-320e-428a-955f-d29cc0e57326","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:50606","PortSpecifier":{"PortValue":50606}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3c2a71e2-320e-428a-955f-d29cc0e57326","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-ebb1a4.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T15:11:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3c2a71e2-320e-428a-955f-d29cc0e57326","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:50606","PortSpecifier":{"PortValue":50606}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784041898,"nanos":613173529},"http":{"id":"3c2a71e2-320e-428a-955f-d29cc0e57326","method":"POST","headers":{":authority":"e2e-shared-a-ebb1a4.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T15:11:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3c2a71e2-320e-428a-955f-d29cc0e57326","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T15:11:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3c2a71e2-320e-428a-955f-d29cc0e57326","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c34cfb71-3058-4b32-8f33-e0d6d7dad951","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a225cdb-1660-4d55-bdaf-f564f742244d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f6461cc0c70f"]}} {"level":"debug","ts":"2026-07-14T15:11:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3c2a71e2-320e-428a-955f-d29cc0e57326","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f6461cc0c70f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a225cdb-1660-4d55-bdaf-f564f742244d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c34cfb71-3058-4b32-8f33-e0d6d7dad951","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c869ed378b6eee38de6e0dc2b1bab7f0abdb1f511f03c708da07d5124d80181f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ebb1a4.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T15:11:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c2a71e2-320e-428a-955f-d29cc0e57326","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:11:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c2a71e2-320e-428a-955f-d29cc0e57326","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:11:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c2a71e2-320e-428a-955f-d29cc0e57326","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ebb1a4/auth-test-model-ebb1a4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ebb1a4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:11:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3c2a71e2-320e-428a-955f-d29cc0e57326","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T15:11:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3c2a71e2-320e-428a-955f-d29cc0e57326","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T15:11:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3c2a71e2-320e-428a-955f-d29cc0e57326","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T15:11:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3c2a71e2-320e-428a-955f-d29cc0e57326","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T15:11:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3c2a71e2-320e-428a-955f-d29cc0e57326","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T15:11:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4f7efee3-2300-4c51-9923-232ad939708c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:46002","PortSpecifier":{"PortValue":46002}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4f7efee3-2300-4c51-9923-232ad939708c","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-747ac7.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T15:11:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4f7efee3-2300-4c51-9923-232ad939708c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:46002","PortSpecifier":{"PortValue":46002}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784041898,"nanos":648301251},"http":{"id":"4f7efee3-2300-4c51-9923-232ad939708c","method":"POST","headers":{":authority":"e2e-shared-b-747ac7.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T15:11:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4f7efee3-2300-4c51-9923-232ad939708c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T15:11:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4f7efee3-2300-4c51-9923-232ad939708c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c34cfb71-3058-4b32-8f33-e0d6d7dad951","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a225cdb-1660-4d55-bdaf-f564f742244d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f6461cc0c70f"]}} {"level":"debug","ts":"2026-07-14T15:11:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4f7efee3-2300-4c51-9923-232ad939708c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f6461cc0c70f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a225cdb-1660-4d55-bdaf-f564f742244d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c34cfb71-3058-4b32-8f33-e0d6d7dad951","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4f4a1703447958cab3315055ee7e5a173e8aebd3d60d1917ee4b9e85fe668064"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-747ac7.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T15:11:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f7efee3-2300-4c51-9923-232ad939708c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:11:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f7efee3-2300-4c51-9923-232ad939708c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:11:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f7efee3-2300-4c51-9923-232ad939708c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-747ac7/auth-test-model-747ac7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-747ac7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:11:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4f7efee3-2300-4c51-9923-232ad939708c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T15:11:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f7efee3-2300-4c51-9923-232ad939708c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T15:11:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f7efee3-2300-4c51-9923-232ad939708c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T15:11:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4f7efee3-2300-4c51-9923-232ad939708c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T15:11:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4f7efee3-2300-4c51-9923-232ad939708c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T15:11:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e2d1eb62-afdd-4f05-976d-bc81e74d4460","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:42548","PortSpecifier":{"PortValue":42548}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e2d1eb62-afdd-4f05-976d-bc81e74d4460","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ebb1a4.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T15:11:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e2d1eb62-afdd-4f05-976d-bc81e74d4460","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:42548","PortSpecifier":{"PortValue":42548}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784041918,"nanos":44623371},"http":{"id":"e2d1eb62-afdd-4f05-976d-bc81e74d4460","method":"POST","headers":{":authority":"e2e-shared-a-ebb1a4.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T15:11:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e2d1eb62-afdd-4f05-976d-bc81e74d4460","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T15:11:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e2d1eb62-afdd-4f05-976d-bc81e74d4460","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c34cfb71-3058-4b32-8f33-e0d6d7dad951","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a225cdb-1660-4d55-bdaf-f564f742244d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f6461cc0c70f"]}} {"level":"debug","ts":"2026-07-14T15:11:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e2d1eb62-afdd-4f05-976d-bc81e74d4460","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f6461cc0c70f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a225cdb-1660-4d55-bdaf-f564f742244d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c34cfb71-3058-4b32-8f33-e0d6d7dad951","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c869ed378b6eee38de6e0dc2b1bab7f0abdb1f511f03c708da07d5124d80181f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ebb1a4.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T15:11:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e2d1eb62-afdd-4f05-976d-bc81e74d4460","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:11:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e2d1eb62-afdd-4f05-976d-bc81e74d4460","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:11:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e2d1eb62-afdd-4f05-976d-bc81e74d4460","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ebb1a4/auth-test-model-ebb1a4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ebb1a4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:11:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e2d1eb62-afdd-4f05-976d-bc81e74d4460","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T15:11:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e2d1eb62-afdd-4f05-976d-bc81e74d4460","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T15:11:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e2d1eb62-afdd-4f05-976d-bc81e74d4460","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T15:11:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e2d1eb62-afdd-4f05-976d-bc81e74d4460","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T15:11:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e2d1eb62-afdd-4f05-976d-bc81e74d4460","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T15:11:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3c4bc3af-48a3-4a70-bf5b-e7b51217e977","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:35094","PortSpecifier":{"PortValue":35094}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3c4bc3af-48a3-4a70-bf5b-e7b51217e977","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-747ac7.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T15:11:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3c4bc3af-48a3-4a70-bf5b-e7b51217e977","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:35094","PortSpecifier":{"PortValue":35094}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784041918,"nanos":80658294},"http":{"id":"3c4bc3af-48a3-4a70-bf5b-e7b51217e977","method":"POST","headers":{":authority":"e2e-shared-b-747ac7.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T15:11:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3c4bc3af-48a3-4a70-bf5b-e7b51217e977","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T15:11:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3c4bc3af-48a3-4a70-bf5b-e7b51217e977","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c34cfb71-3058-4b32-8f33-e0d6d7dad951","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a225cdb-1660-4d55-bdaf-f564f742244d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f6461cc0c70f"]}} {"level":"debug","ts":"2026-07-14T15:11:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3c4bc3af-48a3-4a70-bf5b-e7b51217e977","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f6461cc0c70f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a225cdb-1660-4d55-bdaf-f564f742244d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c34cfb71-3058-4b32-8f33-e0d6d7dad951","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4f4a1703447958cab3315055ee7e5a173e8aebd3d60d1917ee4b9e85fe668064"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-747ac7.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T15:11:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c4bc3af-48a3-4a70-bf5b-e7b51217e977","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:11:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c4bc3af-48a3-4a70-bf5b-e7b51217e977","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:11:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c4bc3af-48a3-4a70-bf5b-e7b51217e977","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-747ac7/auth-test-model-747ac7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-747ac7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:11:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3c4bc3af-48a3-4a70-bf5b-e7b51217e977","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T15:11:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3c4bc3af-48a3-4a70-bf5b-e7b51217e977","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T15:11:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3c4bc3af-48a3-4a70-bf5b-e7b51217e977","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T15:11:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3c4bc3af-48a3-4a70-bf5b-e7b51217e977","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T15:11:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3c4bc3af-48a3-4a70-bf5b-e7b51217e977","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T15:11:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"af8ffe2c-817f-430f-bf50-2b7a3747bee0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:35100","PortSpecifier":{"PortValue":35100}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"af8ffe2c-817f-430f-bf50-2b7a3747bee0","method":"GET","path":"/maas-api/v1/api-keys/0413da48-ffc3-4508-9360-f489573278c0","host":"e2e-shared-b-747ac7.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T15:11:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"af8ffe2c-817f-430f-bf50-2b7a3747bee0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:35100","PortSpecifier":{"PortValue":35100}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784041918,"nanos":117823849},"http":{"id":"af8ffe2c-817f-430f-bf50-2b7a3747bee0","method":"GET","headers":{":authority":"e2e-shared-b-747ac7.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/0413da48-ffc3-4508-9360-f489573278c0",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T15:11:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"af8ffe2c-817f-430f-bf50-2b7a3747bee0","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T15:11:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"af8ffe2c-817f-430f-bf50-2b7a3747bee0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c34cfb71-3058-4b32-8f33-e0d6d7dad951","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a225cdb-1660-4d55-bdaf-f564f742244d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f6461cc0c70f"]}} {"level":"debug","ts":"2026-07-14T15:11:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"af8ffe2c-817f-430f-bf50-2b7a3747bee0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f6461cc0c70f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a225cdb-1660-4d55-bdaf-f564f742244d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c34cfb71-3058-4b32-8f33-e0d6d7dad951","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4f4a1703447958cab3315055ee7e5a173e8aebd3d60d1917ee4b9e85fe668064"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-747ac7.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/0413da48-ffc3-4508-9360-f489573278c0",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T15:11:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af8ffe2c-817f-430f-bf50-2b7a3747bee0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:11:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af8ffe2c-817f-430f-bf50-2b7a3747bee0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:11:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af8ffe2c-817f-430f-bf50-2b7a3747bee0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-747ac7/auth-test-model-747ac7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-747ac7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:11:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"af8ffe2c-817f-430f-bf50-2b7a3747bee0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T15:11:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"af8ffe2c-817f-430f-bf50-2b7a3747bee0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T15:11:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"af8ffe2c-817f-430f-bf50-2b7a3747bee0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T15:11:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"af8ffe2c-817f-430f-bf50-2b7a3747bee0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T15:11:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"af8ffe2c-817f-430f-bf50-2b7a3747bee0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T15:11:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"52af3102-e259-4912-b867-b0d37c977e94","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:42552","PortSpecifier":{"PortValue":42552}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"52af3102-e259-4912-b867-b0d37c977e94","method":"GET","path":"/maas-api/v1/api-keys/0413da48-ffc3-4508-9360-f489573278c0","host":"e2e-shared-a-ebb1a4.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T15:11:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"52af3102-e259-4912-b867-b0d37c977e94","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:42552","PortSpecifier":{"PortValue":42552}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784041918,"nanos":150850414},"http":{"id":"52af3102-e259-4912-b867-b0d37c977e94","method":"GET","headers":{":authority":"e2e-shared-a-ebb1a4.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/0413da48-ffc3-4508-9360-f489573278c0",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T15:11:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"52af3102-e259-4912-b867-b0d37c977e94","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T15:11:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"52af3102-e259-4912-b867-b0d37c977e94","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c34cfb71-3058-4b32-8f33-e0d6d7dad951","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a225cdb-1660-4d55-bdaf-f564f742244d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f6461cc0c70f"]}} {"level":"debug","ts":"2026-07-14T15:11:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"52af3102-e259-4912-b867-b0d37c977e94","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f6461cc0c70f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a225cdb-1660-4d55-bdaf-f564f742244d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c34cfb71-3058-4b32-8f33-e0d6d7dad951","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c869ed378b6eee38de6e0dc2b1bab7f0abdb1f511f03c708da07d5124d80181f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ebb1a4.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/0413da48-ffc3-4508-9360-f489573278c0",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T15:11:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52af3102-e259-4912-b867-b0d37c977e94","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:11:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52af3102-e259-4912-b867-b0d37c977e94","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:11:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52af3102-e259-4912-b867-b0d37c977e94","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ebb1a4/auth-test-model-ebb1a4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ebb1a4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:11:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"52af3102-e259-4912-b867-b0d37c977e94","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T15:11:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52af3102-e259-4912-b867-b0d37c977e94","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T15:11:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52af3102-e259-4912-b867-b0d37c977e94","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T15:11:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"52af3102-e259-4912-b867-b0d37c977e94","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T15:11:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"52af3102-e259-4912-b867-b0d37c977e94","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T15:12:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"08f38597-d395-455f-a5b3-587fbe4f1c9f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:38774","PortSpecifier":{"PortValue":38774}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"08f38597-d395-455f-a5b3-587fbe4f1c9f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ebb1a4.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T15:12:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"08f38597-d395-455f-a5b3-587fbe4f1c9f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:38774","PortSpecifier":{"PortValue":38774}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784041935,"nanos":275282897},"http":{"id":"08f38597-d395-455f-a5b3-587fbe4f1c9f","method":"POST","headers":{":authority":"e2e-shared-a-ebb1a4.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T15:12:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"08f38597-d395-455f-a5b3-587fbe4f1c9f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T15:12:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"08f38597-d395-455f-a5b3-587fbe4f1c9f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c34cfb71-3058-4b32-8f33-e0d6d7dad951","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a225cdb-1660-4d55-bdaf-f564f742244d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f6461cc0c70f"]}} {"level":"debug","ts":"2026-07-14T15:12:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"08f38597-d395-455f-a5b3-587fbe4f1c9f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f6461cc0c70f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a225cdb-1660-4d55-bdaf-f564f742244d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c34cfb71-3058-4b32-8f33-e0d6d7dad951","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c869ed378b6eee38de6e0dc2b1bab7f0abdb1f511f03c708da07d5124d80181f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ebb1a4.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T15:12:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"08f38597-d395-455f-a5b3-587fbe4f1c9f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:12:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"08f38597-d395-455f-a5b3-587fbe4f1c9f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:12:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"08f38597-d395-455f-a5b3-587fbe4f1c9f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ebb1a4/auth-test-model-ebb1a4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ebb1a4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:12:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"08f38597-d395-455f-a5b3-587fbe4f1c9f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T15:12:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"08f38597-d395-455f-a5b3-587fbe4f1c9f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T15:12:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"08f38597-d395-455f-a5b3-587fbe4f1c9f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T15:12:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"08f38597-d395-455f-a5b3-587fbe4f1c9f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T15:12:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"08f38597-d395-455f-a5b3-587fbe4f1c9f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T15:12:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2751e0fd-04a2-42d0-b58e-29e104801af7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:42244","PortSpecifier":{"PortValue":42244}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2751e0fd-04a2-42d0-b58e-29e104801af7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-747ac7.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T15:12:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2751e0fd-04a2-42d0-b58e-29e104801af7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:42244","PortSpecifier":{"PortValue":42244}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784041935,"nanos":313916217},"http":{"id":"2751e0fd-04a2-42d0-b58e-29e104801af7","method":"POST","headers":{":authority":"e2e-shared-b-747ac7.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T15:12:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2751e0fd-04a2-42d0-b58e-29e104801af7","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T15:12:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2751e0fd-04a2-42d0-b58e-29e104801af7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c34cfb71-3058-4b32-8f33-e0d6d7dad951","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a225cdb-1660-4d55-bdaf-f564f742244d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f6461cc0c70f"]}} {"level":"debug","ts":"2026-07-14T15:12:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2751e0fd-04a2-42d0-b58e-29e104801af7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f6461cc0c70f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a225cdb-1660-4d55-bdaf-f564f742244d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c34cfb71-3058-4b32-8f33-e0d6d7dad951","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4f4a1703447958cab3315055ee7e5a173e8aebd3d60d1917ee4b9e85fe668064"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-747ac7.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T15:12:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2751e0fd-04a2-42d0-b58e-29e104801af7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:12:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2751e0fd-04a2-42d0-b58e-29e104801af7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:12:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2751e0fd-04a2-42d0-b58e-29e104801af7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-747ac7/auth-test-model-747ac7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-747ac7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:12:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2751e0fd-04a2-42d0-b58e-29e104801af7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T15:12:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2751e0fd-04a2-42d0-b58e-29e104801af7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T15:12:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2751e0fd-04a2-42d0-b58e-29e104801af7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T15:12:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2751e0fd-04a2-42d0-b58e-29e104801af7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T15:12:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2751e0fd-04a2-42d0-b58e-29e104801af7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T15:12:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4a6d62a4-3a1f-4f14-bf47-9d81936df052","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:38776","PortSpecifier":{"PortValue":38776}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4a6d62a4-3a1f-4f14-bf47-9d81936df052","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-ebb1a4.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T15:12:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4a6d62a4-3a1f-4f14-bf47-9d81936df052","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:38776","PortSpecifier":{"PortValue":38776}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784041935,"nanos":345698195},"http":{"id":"4a6d62a4-3a1f-4f14-bf47-9d81936df052","method":"POST","headers":{":authority":"e2e-shared-a-ebb1a4.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T15:12:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4a6d62a4-3a1f-4f14-bf47-9d81936df052","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-14HYyiv0sO0ewWCZB_LfcfgeXBZBopRgfNxD0Bxt2kOYhNO9kaw0C7SmPHOD4"} {"level":"debug","ts":"2026-07-14T15:12:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4a6d62a4-3a1f-4f14-bf47-9d81936df052","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ebb1a4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-14HYyiv0sO0ewWCZB_LfcfgeXBZBopRgfNxD0Bxt2kOYhNO9kaw0C7SmPHOD4\"}"} {"level":"debug","ts":"2026-07-14T15:12:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4a6d62a4-3a1f-4f14-bf47-9d81936df052","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ebb1a4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"02c93237-603b-4e04-aa98-0f65b382bf9c","keyName":"e2e-auth-iso-a-19b25c","subscription":"e2e-auth-iso-9ac5de","tenant":"e2e-shared-a-ebb1a4","userId":"02c93237-603b-4e04-aa98-0f65b382bf9c","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T15:12:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4a6d62a4-3a1f-4f14-bf47-9d81936df052","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T15:12:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a6d62a4-3a1f-4f14-bf47-9d81936df052","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:12:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a6d62a4-3a1f-4f14-bf47-9d81936df052","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:12:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a6d62a4-3a1f-4f14-bf47-9d81936df052","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ebb1a4/auth-test-model-ebb1a4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ebb1a4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:12:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4a6d62a4-3a1f-4f14-bf47-9d81936df052","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T15:12:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4a6d62a4-3a1f-4f14-bf47-9d81936df052","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T15:12:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4a6d62a4-3a1f-4f14-bf47-9d81936df052","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-9ac5de"} {"level":"debug","ts":"2026-07-14T15:12:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4a6d62a4-3a1f-4f14-bf47-9d81936df052","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-14T15:12:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4a6d62a4-3a1f-4f14-bf47-9d81936df052","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T15:12:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4a6d62a4-3a1f-4f14-bf47-9d81936df052","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T15:12:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8be62960aa378ba373bf3f426fe305bad7ae0eb49db4b4b510eb2f7ba945aefa"} {"level":"info","ts":"2026-07-14T15:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/920bc86934d3b2072ab3ffc3f4c5d9e17aa08d6bed2f3313f3533296681ef243"} {"level":"info","ts":"2026-07-14T15:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/03f24cce13f6afb2a26fa87c093aa093f97f36eda441598fbd406c73874d67cb"} {"level":"info","ts":"2026-07-14T15:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec6405602db5c2a63446e64913c6ea49242a9560279cedef1ace5dfd48504b99"} {"level":"info","ts":"2026-07-14T15:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2841231b27be9e8906b3f6b7d79b6a5ad7bb223a24f8011b9a09fa85afb1e3ff"} {"level":"info","ts":"2026-07-14T15:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4b7bf2464caaba4c60b701594e16aa7f93617bea491d6865986f0e71fdf1fca4"} {"level":"info","ts":"2026-07-14T15:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bef8630fe1b493fc0f8a49fc2a9958213d1907ddb245ecbda9ebb6084dbc985d"} {"level":"info","ts":"2026-07-14T15:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/625b92f703b6a7def9905def4f73eb6ef9c62036954fd0a9b3483dc3b9e34239"} {"level":"info","ts":"2026-07-14T15:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/504059f2cf7bbd9be8343557e63919054e26a6605cc693c1ee8d36e4dc46043d"} {"level":"info","ts":"2026-07-14T15:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/18dc1beaefe5fc47b100b383d342298f16aee497657df3c33d680b7204fa01ae"} {"level":"info","ts":"2026-07-14T15:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e713d4c0e297c0232a415098ce9155629c0e26d33f178428ddb53f12d626e6e4"} {"level":"info","ts":"2026-07-14T15:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/097584294f40a66ef8ff391a5f642599f2588e7fac553251f936409c0c0b4429"} {"level":"info","ts":"2026-07-14T15:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3f441db0bf418b1c4deb68fad32025b2150af5de42dc0a5510e0bbd5c5a3f5be"} {"level":"info","ts":"2026-07-14T15:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/63b5c351bf7661d3ec76b42051a12e70266b3c3e2b2b6eca858e4174c50f192e"} {"level":"info","ts":"2026-07-14T15:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f7d11d33024053aff979c41ce75c55d65eff113a592688adf5cc5cc7fb48b70e"} {"level":"info","ts":"2026-07-14T15:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2ca7c777d097e2e012abe92d6a65f16a1eab7c1131ee139c437be77607627ab4"} {"level":"debug","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"988cbaff6135beca86a86c254be45d903351421a84a23b76d4b7a1b74684a6fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:12:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:12:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"988cbaff6135beca86a86c254be45d903351421a84a23b76d4b7a1b74684a6fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"988cbaff6135beca86a86c254be45d903351421a84a23b76d4b7a1b74684a6fb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/988cbaff6135beca86a86c254be45d903351421a84a23b76d4b7a1b74684a6fb"} {"level":"debug","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"988cbaff6135beca86a86c254be45d903351421a84a23b76d4b7a1b74684a6fb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/988cbaff6135beca86a86c254be45d903351421a84a23b76d4b7a1b74684a6fb"} {"level":"debug","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"988cbaff6135beca86a86c254be45d903351421a84a23b76d4b7a1b74684a6fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:12:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:12:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["988cbaff6135beca86a86c254be45d903351421a84a23b76d4b7a1b74684a6fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"988cbaff6135beca86a86c254be45d903351421a84a23b76d4b7a1b74684a6fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"988cbaff6135beca86a86c254be45d903351421a84a23b76d4b7a1b74684a6fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:12:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:12:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"988cbaff6135beca86a86c254be45d903351421a84a23b76d4b7a1b74684a6fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"988cbaff6135beca86a86c254be45d903351421a84a23b76d4b7a1b74684a6fb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/988cbaff6135beca86a86c254be45d903351421a84a23b76d4b7a1b74684a6fb"} {"level":"debug","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"988cbaff6135beca86a86c254be45d903351421a84a23b76d4b7a1b74684a6fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71c44c8a4ea900958cb685a82d140fe06aff12fcc017db8a53477971aee68f85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:12:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:12:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/988cbaff6135beca86a86c254be45d903351421a84a23b76d4b7a1b74684a6fb"} {"level":"info","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71c44c8a4ea900958cb685a82d140fe06aff12fcc017db8a53477971aee68f85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"988cbaff6135beca86a86c254be45d903351421a84a23b76d4b7a1b74684a6fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:12:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:12:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["988cbaff6135beca86a86c254be45d903351421a84a23b76d4b7a1b74684a6fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71c44c8a4ea900958cb685a82d140fe06aff12fcc017db8a53477971aee68f85"} {"level":"info","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"988cbaff6135beca86a86c254be45d903351421a84a23b76d4b7a1b74684a6fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71c44c8a4ea900958cb685a82d140fe06aff12fcc017db8a53477971aee68f85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:12:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:12:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71c44c8a4ea900958cb685a82d140fe06aff12fcc017db8a53477971aee68f85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"988cbaff6135beca86a86c254be45d903351421a84a23b76d4b7a1b74684a6fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71c44c8a4ea900958cb685a82d140fe06aff12fcc017db8a53477971aee68f85","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71c44c8a4ea900958cb685a82d140fe06aff12fcc017db8a53477971aee68f85"} {"level":"debug","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71c44c8a4ea900958cb685a82d140fe06aff12fcc017db8a53477971aee68f85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:12:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:12:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71c44c8a4ea900958cb685a82d140fe06aff12fcc017db8a53477971aee68f85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/988cbaff6135beca86a86c254be45d903351421a84a23b76d4b7a1b74684a6fb"} {"level":"info","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71c44c8a4ea900958cb685a82d140fe06aff12fcc017db8a53477971aee68f85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71c44c8a4ea900958cb685a82d140fe06aff12fcc017db8a53477971aee68f85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:12:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:12:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71c44c8a4ea900958cb685a82d140fe06aff12fcc017db8a53477971aee68f85","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71c44c8a4ea900958cb685a82d140fe06aff12fcc017db8a53477971aee68f85"} {"level":"debug","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71c44c8a4ea900958cb685a82d140fe06aff12fcc017db8a53477971aee68f85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71c44c8a4ea900958cb685a82d140fe06aff12fcc017db8a53477971aee68f85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9faaa3b56221bb9858111f69b79aa9deea659dbf5df46a50fedd9b72d7bbb265","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:12:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:12:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71c44c8a4ea900958cb685a82d140fe06aff12fcc017db8a53477971aee68f85"} {"level":"info","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9faaa3b56221bb9858111f69b79aa9deea659dbf5df46a50fedd9b72d7bbb265","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71c44c8a4ea900958cb685a82d140fe06aff12fcc017db8a53477971aee68f85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:12:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:12:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71c44c8a4ea900958cb685a82d140fe06aff12fcc017db8a53477971aee68f85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9faaa3b56221bb9858111f69b79aa9deea659dbf5df46a50fedd9b72d7bbb265"} {"level":"info","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71c44c8a4ea900958cb685a82d140fe06aff12fcc017db8a53477971aee68f85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9faaa3b56221bb9858111f69b79aa9deea659dbf5df46a50fedd9b72d7bbb265","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:12:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:12:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9faaa3b56221bb9858111f69b79aa9deea659dbf5df46a50fedd9b72d7bbb265"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9faaa3b56221bb9858111f69b79aa9deea659dbf5df46a50fedd9b72d7bbb265","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71c44c8a4ea900958cb685a82d140fe06aff12fcc017db8a53477971aee68f85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:12:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:12:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71c44c8a4ea900958cb685a82d140fe06aff12fcc017db8a53477971aee68f85"} {"level":"info","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71c44c8a4ea900958cb685a82d140fe06aff12fcc017db8a53477971aee68f85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9faaa3b56221bb9858111f69b79aa9deea659dbf5df46a50fedd9b72d7bbb265","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:12:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:12:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9faaa3b56221bb9858111f69b79aa9deea659dbf5df46a50fedd9b72d7bbb265"} {"level":"info","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9faaa3b56221bb9858111f69b79aa9deea659dbf5df46a50fedd9b72d7bbb265","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71c44c8a4ea900958cb685a82d140fe06aff12fcc017db8a53477971aee68f85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9faaa3b56221bb9858111f69b79aa9deea659dbf5df46a50fedd9b72d7bbb265","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:12:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:12:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9faaa3b56221bb9858111f69b79aa9deea659dbf5df46a50fedd9b72d7bbb265"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71c44c8a4ea900958cb685a82d140fe06aff12fcc017db8a53477971aee68f85"} {"level":"info","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9faaa3b56221bb9858111f69b79aa9deea659dbf5df46a50fedd9b72d7bbb265","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b945e86781c7967aa431f3c76a17c7a84671215f9ed4997886979b5ef1964dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:12:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:12:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b945e86781c7967aa431f3c76a17c7a84671215f9ed4997886979b5ef1964dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71c44c8a4ea900958cb685a82d140fe06aff12fcc017db8a53477971aee68f85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:12:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:12:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71c44c8a4ea900958cb685a82d140fe06aff12fcc017db8a53477971aee68f85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9faaa3b56221bb9858111f69b79aa9deea659dbf5df46a50fedd9b72d7bbb265"} {"level":"info","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71c44c8a4ea900958cb685a82d140fe06aff12fcc017db8a53477971aee68f85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9faaa3b56221bb9858111f69b79aa9deea659dbf5df46a50fedd9b72d7bbb265","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b945e86781c7967aa431f3c76a17c7a84671215f9ed4997886979b5ef1964dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:12:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:12:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b945e86781c7967aa431f3c76a17c7a84671215f9ed4997886979b5ef1964dd"} {"level":"info","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b945e86781c7967aa431f3c76a17c7a84671215f9ed4997886979b5ef1964dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71c44c8a4ea900958cb685a82d140fe06aff12fcc017db8a53477971aee68f85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b945e86781c7967aa431f3c76a17c7a84671215f9ed4997886979b5ef1964dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:12:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:12:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b945e86781c7967aa431f3c76a17c7a84671215f9ed4997886979b5ef1964dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9faaa3b56221bb9858111f69b79aa9deea659dbf5df46a50fedd9b72d7bbb265"} {"level":"info","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b945e86781c7967aa431f3c76a17c7a84671215f9ed4997886979b5ef1964dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b945e86781c7967aa431f3c76a17c7a84671215f9ed4997886979b5ef1964dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:12:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:12:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b945e86781c7967aa431f3c76a17c7a84671215f9ed4997886979b5ef1964dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6b945e86781c7967aa431f3c76a17c7a84671215f9ed4997886979b5ef1964dd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6b945e86781c7967aa431f3c76a17c7a84671215f9ed4997886979b5ef1964dd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b945e86781c7967aa431f3c76a17c7a84671215f9ed4997886979b5ef1964dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b945e86781c7967aa431f3c76a17c7a84671215f9ed4997886979b5ef1964dd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71c44c8a4ea900958cb685a82d140fe06aff12fcc017db8a53477971aee68f85"} {"level":"debug","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1035d2f0b03a2aae49704cd7cae1a5a7f2fe71327fd84eb9652384103f894957","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:12:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:12:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b945e86781c7967aa431f3c76a17c7a84671215f9ed4997886979b5ef1964dd"} {"level":"info","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1035d2f0b03a2aae49704cd7cae1a5a7f2fe71327fd84eb9652384103f894957","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ada935e0c6abde3e4cae921ebfb1558778796068704fd1a0a11e62693cba292","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:12:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:12:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1035d2f0b03a2aae49704cd7cae1a5a7f2fe71327fd84eb9652384103f894957"} {"level":"info","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ada935e0c6abde3e4cae921ebfb1558778796068704fd1a0a11e62693cba292","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1035d2f0b03a2aae49704cd7cae1a5a7f2fe71327fd84eb9652384103f894957","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:12:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:12:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1035d2f0b03a2aae49704cd7cae1a5a7f2fe71327fd84eb9652384103f894957"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ada935e0c6abde3e4cae921ebfb1558778796068704fd1a0a11e62693cba292"} {"level":"info","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1035d2f0b03a2aae49704cd7cae1a5a7f2fe71327fd84eb9652384103f894957","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ada935e0c6abde3e4cae921ebfb1558778796068704fd1a0a11e62693cba292","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:12:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:12:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ada935e0c6abde3e4cae921ebfb1558778796068704fd1a0a11e62693cba292"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ada935e0c6abde3e4cae921ebfb1558778796068704fd1a0a11e62693cba292","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1035d2f0b03a2aae49704cd7cae1a5a7f2fe71327fd84eb9652384103f894957","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:12:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:12:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1035d2f0b03a2aae49704cd7cae1a5a7f2fe71327fd84eb9652384103f894957"} {"level":"info","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1035d2f0b03a2aae49704cd7cae1a5a7f2fe71327fd84eb9652384103f894957","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ada935e0c6abde3e4cae921ebfb1558778796068704fd1a0a11e62693cba292","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:12:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:12:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ada935e0c6abde3e4cae921ebfb1558778796068704fd1a0a11e62693cba292"} {"level":"info","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ada935e0c6abde3e4cae921ebfb1558778796068704fd1a0a11e62693cba292","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1035d2f0b03a2aae49704cd7cae1a5a7f2fe71327fd84eb9652384103f894957","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ada935e0c6abde3e4cae921ebfb1558778796068704fd1a0a11e62693cba292","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:12:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:12:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ada935e0c6abde3e4cae921ebfb1558778796068704fd1a0a11e62693cba292"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1035d2f0b03a2aae49704cd7cae1a5a7f2fe71327fd84eb9652384103f894957"} {"level":"info","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ada935e0c6abde3e4cae921ebfb1558778796068704fd1a0a11e62693cba292","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecdb7ab5fb6b920a6001557b58fbe63466db61c8cddc5a54b9cee268b8a52535","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:12:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:12:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecdb7ab5fb6b920a6001557b58fbe63466db61c8cddc5a54b9cee268b8a52535","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1035d2f0b03a2aae49704cd7cae1a5a7f2fe71327fd84eb9652384103f894957","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:12:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:12:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1035d2f0b03a2aae49704cd7cae1a5a7f2fe71327fd84eb9652384103f894957"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ada935e0c6abde3e4cae921ebfb1558778796068704fd1a0a11e62693cba292"} {"level":"info","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1035d2f0b03a2aae49704cd7cae1a5a7f2fe71327fd84eb9652384103f894957","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ada935e0c6abde3e4cae921ebfb1558778796068704fd1a0a11e62693cba292","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecdb7ab5fb6b920a6001557b58fbe63466db61c8cddc5a54b9cee268b8a52535","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:12:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:12:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecdb7ab5fb6b920a6001557b58fbe63466db61c8cddc5a54b9cee268b8a52535"} {"level":"info","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecdb7ab5fb6b920a6001557b58fbe63466db61c8cddc5a54b9cee268b8a52535","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1035d2f0b03a2aae49704cd7cae1a5a7f2fe71327fd84eb9652384103f894957","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecdb7ab5fb6b920a6001557b58fbe63466db61c8cddc5a54b9cee268b8a52535","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:12:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:12:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ecdb7ab5fb6b920a6001557b58fbe63466db61c8cddc5a54b9cee268b8a52535"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ada935e0c6abde3e4cae921ebfb1558778796068704fd1a0a11e62693cba292"} {"level":"info","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecdb7ab5fb6b920a6001557b58fbe63466db61c8cddc5a54b9cee268b8a52535","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecdb7ab5fb6b920a6001557b58fbe63466db61c8cddc5a54b9cee268b8a52535","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:12:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:12:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ecdb7ab5fb6b920a6001557b58fbe63466db61c8cddc5a54b9cee268b8a52535"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ecdb7ab5fb6b920a6001557b58fbe63466db61c8cddc5a54b9cee268b8a52535","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ecdb7ab5fb6b920a6001557b58fbe63466db61c8cddc5a54b9cee268b8a52535\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ecdb7ab5fb6b920a6001557b58fbe63466db61c8cddc5a54b9cee268b8a52535","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ecdb7ab5fb6b920a6001557b58fbe63466db61c8cddc5a54b9cee268b8a52535","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1035d2f0b03a2aae49704cd7cae1a5a7f2fe71327fd84eb9652384103f894957"} {"level":"info","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecdb7ab5fb6b920a6001557b58fbe63466db61c8cddc5a54b9cee268b8a52535"} {"level":"debug","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e4c9bcd97a59bf4780d11132a77dba0b6009f077fa1fb2afada1e641ddc8186","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:12:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:12:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e4c9bcd97a59bf4780d11132a77dba0b6009f077fa1fb2afada1e641ddc8186","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e4c9bcd97a59bf4780d11132a77dba0b6009f077fa1fb2afada1e641ddc8186","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e4c9bcd97a59bf4780d11132a77dba0b6009f077fa1fb2afada1e641ddc8186"} {"level":"debug","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e4c9bcd97a59bf4780d11132a77dba0b6009f077fa1fb2afada1e641ddc8186","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e4c9bcd97a59bf4780d11132a77dba0b6009f077fa1fb2afada1e641ddc8186"} {"level":"debug","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e4c9bcd97a59bf4780d11132a77dba0b6009f077fa1fb2afada1e641ddc8186","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:12:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:12:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e4c9bcd97a59bf4780d11132a77dba0b6009f077fa1fb2afada1e641ddc8186"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e4c9bcd97a59bf4780d11132a77dba0b6009f077fa1fb2afada1e641ddc8186","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e4c9bcd97a59bf4780d11132a77dba0b6009f077fa1fb2afada1e641ddc8186","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:12:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:12:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e4c9bcd97a59bf4780d11132a77dba0b6009f077fa1fb2afada1e641ddc8186","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e4c9bcd97a59bf4780d11132a77dba0b6009f077fa1fb2afada1e641ddc8186","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e4c9bcd97a59bf4780d11132a77dba0b6009f077fa1fb2afada1e641ddc8186","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e4c9bcd97a59bf4780d11132a77dba0b6009f077fa1fb2afada1e641ddc8186"} {"level":"debug","ts":"2026-07-14T15:12:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e4c9bcd97a59bf4780d11132a77dba0b6009f077fa1fb2afada1e641ddc8186","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:12:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e4c9bcd97a59bf4780d11132a77dba0b6009f077fa1fb2afada1e641ddc8186"} {"level":"debug","ts":"2026-07-14T15:12:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e4c9bcd97a59bf4780d11132a77dba0b6009f077fa1fb2afada1e641ddc8186","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:12:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:12:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e4c9bcd97a59bf4780d11132a77dba0b6009f077fa1fb2afada1e641ddc8186"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e4c9bcd97a59bf4780d11132a77dba0b6009f077fa1fb2afada1e641ddc8186","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e4c9bcd97a59bf4780d11132a77dba0b6009f077fa1fb2afada1e641ddc8186","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:12:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:12:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e4c9bcd97a59bf4780d11132a77dba0b6009f077fa1fb2afada1e641ddc8186"} {"level":"info","ts":"2026-07-14T15:12:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e4c9bcd97a59bf4780d11132a77dba0b6009f077fa1fb2afada1e641ddc8186","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e4c9bcd97a59bf4780d11132a77dba0b6009f077fa1fb2afada1e641ddc8186","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e4c9bcd97a59bf4780d11132a77dba0b6009f077fa1fb2afada1e641ddc8186","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:12:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e4c9bcd97a59bf4780d11132a77dba0b6009f077fa1fb2afada1e641ddc8186"} {"level":"debug","ts":"2026-07-14T15:12:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e4c9bcd97a59bf4780d11132a77dba0b6009f077fa1fb2afada1e641ddc8186","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:12:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:12:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e4c9bcd97a59bf4780d11132a77dba0b6009f077fa1fb2afada1e641ddc8186"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e4c9bcd97a59bf4780d11132a77dba0b6009f077fa1fb2afada1e641ddc8186","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e4c9bcd97a59bf4780d11132a77dba0b6009f077fa1fb2afada1e641ddc8186","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:12:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:12:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e4c9bcd97a59bf4780d11132a77dba0b6009f077fa1fb2afada1e641ddc8186","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:12:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e4c9bcd97a59bf4780d11132a77dba0b6009f077fa1fb2afada1e641ddc8186"} {"level":"debug","ts":"2026-07-14T15:12:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e4c9bcd97a59bf4780d11132a77dba0b6009f077fa1fb2afada1e641ddc8186","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e4c9bcd97a59bf4780d11132a77dba0b6009f077fa1fb2afada1e641ddc8186","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e4c9bcd97a59bf4780d11132a77dba0b6009f077fa1fb2afada1e641ddc8186","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e4c9bcd97a59bf4780d11132a77dba0b6009f077fa1fb2afada1e641ddc8186","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:12:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e4c9bcd97a59bf4780d11132a77dba0b6009f077fa1fb2afada1e641ddc8186"} {"level":"debug","ts":"2026-07-14T15:12:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e4c9bcd97a59bf4780d11132a77dba0b6009f077fa1fb2afada1e641ddc8186","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:12:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:12:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e4c9bcd97a59bf4780d11132a77dba0b6009f077fa1fb2afada1e641ddc8186"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e4c9bcd97a59bf4780d11132a77dba0b6009f077fa1fb2afada1e641ddc8186","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e4c9bcd97a59bf4780d11132a77dba0b6009f077fa1fb2afada1e641ddc8186","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:12:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:12:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e4c9bcd97a59bf4780d11132a77dba0b6009f077fa1fb2afada1e641ddc8186","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e4c9bcd97a59bf4780d11132a77dba0b6009f077fa1fb2afada1e641ddc8186","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:12:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e4c9bcd97a59bf4780d11132a77dba0b6009f077fa1fb2afada1e641ddc8186"} {"level":"debug","ts":"2026-07-14T15:12:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e4c9bcd97a59bf4780d11132a77dba0b6009f077fa1fb2afada1e641ddc8186","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:12:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e4c9bcd97a59bf4780d11132a77dba0b6009f077fa1fb2afada1e641ddc8186"} {"level":"debug","ts":"2026-07-14T15:12:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e4c9bcd97a59bf4780d11132a77dba0b6009f077fa1fb2afada1e641ddc8186","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:12:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:12:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e4c9bcd97a59bf4780d11132a77dba0b6009f077fa1fb2afada1e641ddc8186"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e4c9bcd97a59bf4780d11132a77dba0b6009f077fa1fb2afada1e641ddc8186","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e4c9bcd97a59bf4780d11132a77dba0b6009f077fa1fb2afada1e641ddc8186","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:12:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e4c9bcd97a59bf4780d11132a77dba0b6009f077fa1fb2afada1e641ddc8186"} {"level":"debug","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c00961cae08c6a49f1a4e974d73bbb78754a724b52a3e97aeb3ecc416869beaf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:12:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:12:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c00961cae08c6a49f1a4e974d73bbb78754a724b52a3e97aeb3ecc416869beaf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c00961cae08c6a49f1a4e974d73bbb78754a724b52a3e97aeb3ecc416869beaf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c00961cae08c6a49f1a4e974d73bbb78754a724b52a3e97aeb3ecc416869beaf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c00961cae08c6a49f1a4e974d73bbb78754a724b52a3e97aeb3ecc416869beaf"} {"level":"debug","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c00961cae08c6a49f1a4e974d73bbb78754a724b52a3e97aeb3ecc416869beaf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c00961cae08c6a49f1a4e974d73bbb78754a724b52a3e97aeb3ecc416869beaf"} {"level":"debug","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c00961cae08c6a49f1a4e974d73bbb78754a724b52a3e97aeb3ecc416869beaf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:12:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:12:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c00961cae08c6a49f1a4e974d73bbb78754a724b52a3e97aeb3ecc416869beaf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c00961cae08c6a49f1a4e974d73bbb78754a724b52a3e97aeb3ecc416869beaf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c00961cae08c6a49f1a4e974d73bbb78754a724b52a3e97aeb3ecc416869beaf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:12:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:12:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c00961cae08c6a49f1a4e974d73bbb78754a724b52a3e97aeb3ecc416869beaf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bc4d725b6bf66c6350e078df87b9ec5c38c051c506ea46458e22180f49513d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:12:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:12:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c00961cae08c6a49f1a4e974d73bbb78754a724b52a3e97aeb3ecc416869beaf"} {"level":"info","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bc4d725b6bf66c6350e078df87b9ec5c38c051c506ea46458e22180f49513d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c00961cae08c6a49f1a4e974d73bbb78754a724b52a3e97aeb3ecc416869beaf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:12:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:12:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c00961cae08c6a49f1a4e974d73bbb78754a724b52a3e97aeb3ecc416869beaf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bc4d725b6bf66c6350e078df87b9ec5c38c051c506ea46458e22180f49513d0"} {"level":"info","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c00961cae08c6a49f1a4e974d73bbb78754a724b52a3e97aeb3ecc416869beaf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bc4d725b6bf66c6350e078df87b9ec5c38c051c506ea46458e22180f49513d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:12:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:12:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5bc4d725b6bf66c6350e078df87b9ec5c38c051c506ea46458e22180f49513d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bc4d725b6bf66c6350e078df87b9ec5c38c051c506ea46458e22180f49513d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c00961cae08c6a49f1a4e974d73bbb78754a724b52a3e97aeb3ecc416869beaf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:12:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:12:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c00961cae08c6a49f1a4e974d73bbb78754a724b52a3e97aeb3ecc416869beaf"} {"level":"info","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c00961cae08c6a49f1a4e974d73bbb78754a724b52a3e97aeb3ecc416869beaf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bc4d725b6bf66c6350e078df87b9ec5c38c051c506ea46458e22180f49513d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:12:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:12:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bc4d725b6bf66c6350e078df87b9ec5c38c051c506ea46458e22180f49513d0"} {"level":"info","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bc4d725b6bf66c6350e078df87b9ec5c38c051c506ea46458e22180f49513d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c00961cae08c6a49f1a4e974d73bbb78754a724b52a3e97aeb3ecc416869beaf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bc4d725b6bf66c6350e078df87b9ec5c38c051c506ea46458e22180f49513d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:12:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:12:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5bc4d725b6bf66c6350e078df87b9ec5c38c051c506ea46458e22180f49513d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bc4d725b6bf66c6350e078df87b9ec5c38c051c506ea46458e22180f49513d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c00961cae08c6a49f1a4e974d73bbb78754a724b52a3e97aeb3ecc416869beaf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bc4d725b6bf66c6350e078df87b9ec5c38c051c506ea46458e22180f49513d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:12:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:12:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5bc4d725b6bf66c6350e078df87b9ec5c38c051c506ea46458e22180f49513d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c00961cae08c6a49f1a4e974d73bbb78754a724b52a3e97aeb3ecc416869beaf"} {"level":"error","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5bc4d725b6bf66c6350e078df87b9ec5c38c051c506ea46458e22180f49513d0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5bc4d725b6bf66c6350e078df87b9ec5c38c051c506ea46458e22180f49513d0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bc4d725b6bf66c6350e078df87b9ec5c38c051c506ea46458e22180f49513d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:12:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:12:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bc4d725b6bf66c6350e078df87b9ec5c38c051c506ea46458e22180f49513d0"} {"level":"info","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bc4d725b6bf66c6350e078df87b9ec5c38c051c506ea46458e22180f49513d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c00961cae08c6a49f1a4e974d73bbb78754a724b52a3e97aeb3ecc416869beaf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:12:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:12:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c00961cae08c6a49f1a4e974d73bbb78754a724b52a3e97aeb3ecc416869beaf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c00961cae08c6a49f1a4e974d73bbb78754a724b52a3e97aeb3ecc416869beaf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bc4d725b6bf66c6350e078df87b9ec5c38c051c506ea46458e22180f49513d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c00961cae08c6a49f1a4e974d73bbb78754a724b52a3e97aeb3ecc416869beaf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bc4d725b6bf66c6350e078df87b9ec5c38c051c506ea46458e22180f49513d0"} {"level":"debug","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bc4d725b6bf66c6350e078df87b9ec5c38c051c506ea46458e22180f49513d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:12:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:12:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5bc4d725b6bf66c6350e078df87b9ec5c38c051c506ea46458e22180f49513d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c00961cae08c6a49f1a4e974d73bbb78754a724b52a3e97aeb3ecc416869beaf"} {"level":"info","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bc4d725b6bf66c6350e078df87b9ec5c38c051c506ea46458e22180f49513d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bc4d725b6bf66c6350e078df87b9ec5c38c051c506ea46458e22180f49513d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:12:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:12:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bc4d725b6bf66c6350e078df87b9ec5c38c051c506ea46458e22180f49513d0"} {"level":"info","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bc4d725b6bf66c6350e078df87b9ec5c38c051c506ea46458e22180f49513d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9488b52e5f33616ac68760e467146bd817520decd0e0ac9b341ac7c1248b40df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:12:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:12:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bc4d725b6bf66c6350e078df87b9ec5c38c051c506ea46458e22180f49513d0"} {"level":"info","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9488b52e5f33616ac68760e467146bd817520decd0e0ac9b341ac7c1248b40df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bc4d725b6bf66c6350e078df87b9ec5c38c051c506ea46458e22180f49513d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:12:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:12:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5bc4d725b6bf66c6350e078df87b9ec5c38c051c506ea46458e22180f49513d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bc4d725b6bf66c6350e078df87b9ec5c38c051c506ea46458e22180f49513d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9488b52e5f33616ac68760e467146bd817520decd0e0ac9b341ac7c1248b40df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:12:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:12:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9488b52e5f33616ac68760e467146bd817520decd0e0ac9b341ac7c1248b40df"} {"level":"info","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9488b52e5f33616ac68760e467146bd817520decd0e0ac9b341ac7c1248b40df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bc4d725b6bf66c6350e078df87b9ec5c38c051c506ea46458e22180f49513d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:12:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:12:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bc4d725b6bf66c6350e078df87b9ec5c38c051c506ea46458e22180f49513d0"} {"level":"info","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bc4d725b6bf66c6350e078df87b9ec5c38c051c506ea46458e22180f49513d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9488b52e5f33616ac68760e467146bd817520decd0e0ac9b341ac7c1248b40df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bc4d725b6bf66c6350e078df87b9ec5c38c051c506ea46458e22180f49513d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:12:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:12:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5bc4d725b6bf66c6350e078df87b9ec5c38c051c506ea46458e22180f49513d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bc4d725b6bf66c6350e078df87b9ec5c38c051c506ea46458e22180f49513d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bc4d725b6bf66c6350e078df87b9ec5c38c051c506ea46458e22180f49513d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:12:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:12:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5bc4d725b6bf66c6350e078df87b9ec5c38c051c506ea46458e22180f49513d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9488b52e5f33616ac68760e467146bd817520decd0e0ac9b341ac7c1248b40df"} {"level":"error","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5bc4d725b6bf66c6350e078df87b9ec5c38c051c506ea46458e22180f49513d0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5bc4d725b6bf66c6350e078df87b9ec5c38c051c506ea46458e22180f49513d0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9488b52e5f33616ac68760e467146bd817520decd0e0ac9b341ac7c1248b40df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:12:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:12:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9488b52e5f33616ac68760e467146bd817520decd0e0ac9b341ac7c1248b40df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bc4d725b6bf66c6350e078df87b9ec5c38c051c506ea46458e22180f49513d0"} {"level":"info","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9488b52e5f33616ac68760e467146bd817520decd0e0ac9b341ac7c1248b40df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bc4d725b6bf66c6350e078df87b9ec5c38c051c506ea46458e22180f49513d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:12:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:12:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bc4d725b6bf66c6350e078df87b9ec5c38c051c506ea46458e22180f49513d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9488b52e5f33616ac68760e467146bd817520decd0e0ac9b341ac7c1248b40df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bc4d725b6bf66c6350e078df87b9ec5c38c051c506ea46458e22180f49513d0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bc4d725b6bf66c6350e078df87b9ec5c38c051c506ea46458e22180f49513d0"} {"level":"debug","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bc4d725b6bf66c6350e078df87b9ec5c38c051c506ea46458e22180f49513d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:12:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:12:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5bc4d725b6bf66c6350e078df87b9ec5c38c051c506ea46458e22180f49513d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bc4d725b6bf66c6350e078df87b9ec5c38c051c506ea46458e22180f49513d0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9488b52e5f33616ac68760e467146bd817520decd0e0ac9b341ac7c1248b40df"} {"level":"debug","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bc4d725b6bf66c6350e078df87b9ec5c38c051c506ea46458e22180f49513d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:12:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:12:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bc4d725b6bf66c6350e078df87b9ec5c38c051c506ea46458e22180f49513d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bc4d725b6bf66c6350e078df87b9ec5c38c051c506ea46458e22180f49513d0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bc4d725b6bf66c6350e078df87b9ec5c38c051c506ea46458e22180f49513d0"} {"level":"debug","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bc4d725b6bf66c6350e078df87b9ec5c38c051c506ea46458e22180f49513d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bc4d725b6bf66c6350e078df87b9ec5c38c051c506ea46458e22180f49513d0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bc4d725b6bf66c6350e078df87b9ec5c38c051c506ea46458e22180f49513d0"} {"level":"debug","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bc4d725b6bf66c6350e078df87b9ec5c38c051c506ea46458e22180f49513d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:12:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:12:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5bc4d725b6bf66c6350e078df87b9ec5c38c051c506ea46458e22180f49513d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bc4d725b6bf66c6350e078df87b9ec5c38c051c506ea46458e22180f49513d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bc4d725b6bf66c6350e078df87b9ec5c38c051c506ea46458e22180f49513d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:12:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:12:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bc4d725b6bf66c6350e078df87b9ec5c38c051c506ea46458e22180f49513d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bc4d725b6bf66c6350e078df87b9ec5c38c051c506ea46458e22180f49513d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bc4d725b6bf66c6350e078df87b9ec5c38c051c506ea46458e22180f49513d0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bc4d725b6bf66c6350e078df87b9ec5c38c051c506ea46458e22180f49513d0"} {"level":"debug","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bc4d725b6bf66c6350e078df87b9ec5c38c051c506ea46458e22180f49513d0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bc4d725b6bf66c6350e078df87b9ec5c38c051c506ea46458e22180f49513d0"} {"level":"debug","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53234d6f02f29ca00f0e530dfc5a71c77add75c66fb4a9b1e6ec999855f860b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:12:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:12:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53234d6f02f29ca00f0e530dfc5a71c77add75c66fb4a9b1e6ec999855f860b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53234d6f02f29ca00f0e530dfc5a71c77add75c66fb4a9b1e6ec999855f860b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53234d6f02f29ca00f0e530dfc5a71c77add75c66fb4a9b1e6ec999855f860b8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53234d6f02f29ca00f0e530dfc5a71c77add75c66fb4a9b1e6ec999855f860b8"} {"level":"debug","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bc4d725b6bf66c6350e078df87b9ec5c38c051c506ea46458e22180f49513d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:12:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:12:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5bc4d725b6bf66c6350e078df87b9ec5c38c051c506ea46458e22180f49513d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bc4d725b6bf66c6350e078df87b9ec5c38c051c506ea46458e22180f49513d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bc4d725b6bf66c6350e078df87b9ec5c38c051c506ea46458e22180f49513d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53234d6f02f29ca00f0e530dfc5a71c77add75c66fb4a9b1e6ec999855f860b8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53234d6f02f29ca00f0e530dfc5a71c77add75c66fb4a9b1e6ec999855f860b8"} {"level":"info","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bc4d725b6bf66c6350e078df87b9ec5c38c051c506ea46458e22180f49513d0"} {"level":"debug","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53234d6f02f29ca00f0e530dfc5a71c77add75c66fb4a9b1e6ec999855f860b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:12:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:12:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53234d6f02f29ca00f0e530dfc5a71c77add75c66fb4a9b1e6ec999855f860b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53234d6f02f29ca00f0e530dfc5a71c77add75c66fb4a9b1e6ec999855f860b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53234d6f02f29ca00f0e530dfc5a71c77add75c66fb4a9b1e6ec999855f860b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:12:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:12:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53234d6f02f29ca00f0e530dfc5a71c77add75c66fb4a9b1e6ec999855f860b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53234d6f02f29ca00f0e530dfc5a71c77add75c66fb4a9b1e6ec999855f860b8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53234d6f02f29ca00f0e530dfc5a71c77add75c66fb4a9b1e6ec999855f860b8"} {"level":"debug","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53234d6f02f29ca00f0e530dfc5a71c77add75c66fb4a9b1e6ec999855f860b8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53234d6f02f29ca00f0e530dfc5a71c77add75c66fb4a9b1e6ec999855f860b8"} {"level":"debug","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53234d6f02f29ca00f0e530dfc5a71c77add75c66fb4a9b1e6ec999855f860b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:12:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:12:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53234d6f02f29ca00f0e530dfc5a71c77add75c66fb4a9b1e6ec999855f860b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53234d6f02f29ca00f0e530dfc5a71c77add75c66fb4a9b1e6ec999855f860b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53234d6f02f29ca00f0e530dfc5a71c77add75c66fb4a9b1e6ec999855f860b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:12:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:12:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53234d6f02f29ca00f0e530dfc5a71c77add75c66fb4a9b1e6ec999855f860b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53234d6f02f29ca00f0e530dfc5a71c77add75c66fb4a9b1e6ec999855f860b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53234d6f02f29ca00f0e530dfc5a71c77add75c66fb4a9b1e6ec999855f860b8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53234d6f02f29ca00f0e530dfc5a71c77add75c66fb4a9b1e6ec999855f860b8"} {"level":"info","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53234d6f02f29ca00f0e530dfc5a71c77add75c66fb4a9b1e6ec999855f860b8"} {"level":"debug","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53234d6f02f29ca00f0e530dfc5a71c77add75c66fb4a9b1e6ec999855f860b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:12:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:12:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53234d6f02f29ca00f0e530dfc5a71c77add75c66fb4a9b1e6ec999855f860b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53234d6f02f29ca00f0e530dfc5a71c77add75c66fb4a9b1e6ec999855f860b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53234d6f02f29ca00f0e530dfc5a71c77add75c66fb4a9b1e6ec999855f860b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:12:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:12:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53234d6f02f29ca00f0e530dfc5a71c77add75c66fb4a9b1e6ec999855f860b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53234d6f02f29ca00f0e530dfc5a71c77add75c66fb4a9b1e6ec999855f860b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53234d6f02f29ca00f0e530dfc5a71c77add75c66fb4a9b1e6ec999855f860b8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53234d6f02f29ca00f0e530dfc5a71c77add75c66fb4a9b1e6ec999855f860b8"} {"level":"debug","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53234d6f02f29ca00f0e530dfc5a71c77add75c66fb4a9b1e6ec999855f860b8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53234d6f02f29ca00f0e530dfc5a71c77add75c66fb4a9b1e6ec999855f860b8"} {"level":"debug","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53234d6f02f29ca00f0e530dfc5a71c77add75c66fb4a9b1e6ec999855f860b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:12:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:12:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53234d6f02f29ca00f0e530dfc5a71c77add75c66fb4a9b1e6ec999855f860b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53234d6f02f29ca00f0e530dfc5a71c77add75c66fb4a9b1e6ec999855f860b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9991d7fed1f2b83cca454c9925f2cdbaa086d9bf87ec3e0552495711e6077682","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:12:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:12:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9991d7fed1f2b83cca454c9925f2cdbaa086d9bf87ec3e0552495711e6077682","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53234d6f02f29ca00f0e530dfc5a71c77add75c66fb4a9b1e6ec999855f860b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9991d7fed1f2b83cca454c9925f2cdbaa086d9bf87ec3e0552495711e6077682","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9991d7fed1f2b83cca454c9925f2cdbaa086d9bf87ec3e0552495711e6077682"} {"level":"debug","ts":"2026-07-14T15:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9991d7fed1f2b83cca454c9925f2cdbaa086d9bf87ec3e0552495711e6077682","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:12:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:12:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9991d7fed1f2b83cca454c9925f2cdbaa086d9bf87ec3e0552495711e6077682"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9991d7fed1f2b83cca454c9925f2cdbaa086d9bf87ec3e0552495711e6077682","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9991d7fed1f2b83cca454c9925f2cdbaa086d9bf87ec3e0552495711e6077682","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53234d6f02f29ca00f0e530dfc5a71c77add75c66fb4a9b1e6ec999855f860b8"} {"level":"info","ts":"2026-07-14T15:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9991d7fed1f2b83cca454c9925f2cdbaa086d9bf87ec3e0552495711e6077682"} {"level":"debug","ts":"2026-07-14T15:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"faafb7e7275ab0c9e183ba8f6b97d0b50122dd01f3a2935ea682c31a098fdbfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:12:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:12:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"faafb7e7275ab0c9e183ba8f6b97d0b50122dd01f3a2935ea682c31a098fdbfd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"faafb7e7275ab0c9e183ba8f6b97d0b50122dd01f3a2935ea682c31a098fdbfd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"faafb7e7275ab0c9e183ba8f6b97d0b50122dd01f3a2935ea682c31a098fdbfd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/faafb7e7275ab0c9e183ba8f6b97d0b50122dd01f3a2935ea682c31a098fdbfd"} {"level":"debug","ts":"2026-07-14T15:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"faafb7e7275ab0c9e183ba8f6b97d0b50122dd01f3a2935ea682c31a098fdbfd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/faafb7e7275ab0c9e183ba8f6b97d0b50122dd01f3a2935ea682c31a098fdbfd"} {"level":"debug","ts":"2026-07-14T15:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"faafb7e7275ab0c9e183ba8f6b97d0b50122dd01f3a2935ea682c31a098fdbfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:12:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:12:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["faafb7e7275ab0c9e183ba8f6b97d0b50122dd01f3a2935ea682c31a098fdbfd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"faafb7e7275ab0c9e183ba8f6b97d0b50122dd01f3a2935ea682c31a098fdbfd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"faafb7e7275ab0c9e183ba8f6b97d0b50122dd01f3a2935ea682c31a098fdbfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:12:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:12:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"faafb7e7275ab0c9e183ba8f6b97d0b50122dd01f3a2935ea682c31a098fdbfd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31c6b12e5308c987125df9dbe054591bc259e122850c717d4fd6fa56da8a98b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:12:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:12:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31c6b12e5308c987125df9dbe054591bc259e122850c717d4fd6fa56da8a98b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"faafb7e7275ab0c9e183ba8f6b97d0b50122dd01f3a2935ea682c31a098fdbfd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31c6b12e5308c987125df9dbe054591bc259e122850c717d4fd6fa56da8a98b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/faafb7e7275ab0c9e183ba8f6b97d0b50122dd01f3a2935ea682c31a098fdbfd"} {"level":"debug","ts":"2026-07-14T15:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31c6b12e5308c987125df9dbe054591bc259e122850c717d4fd6fa56da8a98b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:12:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:12:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31c6b12e5308c987125df9dbe054591bc259e122850c717d4fd6fa56da8a98b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"faafb7e7275ab0c9e183ba8f6b97d0b50122dd01f3a2935ea682c31a098fdbfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:12:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:12:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["faafb7e7275ab0c9e183ba8f6b97d0b50122dd01f3a2935ea682c31a098fdbfd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31c6b12e5308c987125df9dbe054591bc259e122850c717d4fd6fa56da8a98b5"} {"level":"info","ts":"2026-07-14T15:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"faafb7e7275ab0c9e183ba8f6b97d0b50122dd01f3a2935ea682c31a098fdbfd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31c6b12e5308c987125df9dbe054591bc259e122850c717d4fd6fa56da8a98b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:12:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:12:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31c6b12e5308c987125df9dbe054591bc259e122850c717d4fd6fa56da8a98b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31c6b12e5308c987125df9dbe054591bc259e122850c717d4fd6fa56da8a98b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"faafb7e7275ab0c9e183ba8f6b97d0b50122dd01f3a2935ea682c31a098fdbfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:12:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:12:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"faafb7e7275ab0c9e183ba8f6b97d0b50122dd01f3a2935ea682c31a098fdbfd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31c6b12e5308c987125df9dbe054591bc259e122850c717d4fd6fa56da8a98b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9671b13e915730e0e1c7cf067ea4206b95bfd6e454ff6c4cd08d63d6648f0a73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:12:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:12:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/faafb7e7275ab0c9e183ba8f6b97d0b50122dd01f3a2935ea682c31a098fdbfd"} {"level":"info","ts":"2026-07-14T15:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9671b13e915730e0e1c7cf067ea4206b95bfd6e454ff6c4cd08d63d6648f0a73","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"faafb7e7275ab0c9e183ba8f6b97d0b50122dd01f3a2935ea682c31a098fdbfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:12:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:12:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["faafb7e7275ab0c9e183ba8f6b97d0b50122dd01f3a2935ea682c31a098fdbfd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"faafb7e7275ab0c9e183ba8f6b97d0b50122dd01f3a2935ea682c31a098fdbfd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9671b13e915730e0e1c7cf067ea4206b95bfd6e454ff6c4cd08d63d6648f0a73","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"faafb7e7275ab0c9e183ba8f6b97d0b50122dd01f3a2935ea682c31a098fdbfd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31c6b12e5308c987125df9dbe054591bc259e122850c717d4fd6fa56da8a98b5"} {"level":"debug","ts":"2026-07-14T15:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9671b13e915730e0e1c7cf067ea4206b95bfd6e454ff6c4cd08d63d6648f0a73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:12:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:12:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9671b13e915730e0e1c7cf067ea4206b95bfd6e454ff6c4cd08d63d6648f0a73"} {"level":"info","ts":"2026-07-14T15:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9671b13e915730e0e1c7cf067ea4206b95bfd6e454ff6c4cd08d63d6648f0a73","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9671b13e915730e0e1c7cf067ea4206b95bfd6e454ff6c4cd08d63d6648f0a73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:12:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:12:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9671b13e915730e0e1c7cf067ea4206b95bfd6e454ff6c4cd08d63d6648f0a73"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9671b13e915730e0e1c7cf067ea4206b95bfd6e454ff6c4cd08d63d6648f0a73","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9671b13e915730e0e1c7cf067ea4206b95bfd6e454ff6c4cd08d63d6648f0a73","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/faafb7e7275ab0c9e183ba8f6b97d0b50122dd01f3a2935ea682c31a098fdbfd"} {"level":"debug","ts":"2026-07-14T15:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9671b13e915730e0e1c7cf067ea4206b95bfd6e454ff6c4cd08d63d6648f0a73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:12:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:12:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9671b13e915730e0e1c7cf067ea4206b95bfd6e454ff6c4cd08d63d6648f0a73","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9671b13e915730e0e1c7cf067ea4206b95bfd6e454ff6c4cd08d63d6648f0a73","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9671b13e915730e0e1c7cf067ea4206b95bfd6e454ff6c4cd08d63d6648f0a73","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9671b13e915730e0e1c7cf067ea4206b95bfd6e454ff6c4cd08d63d6648f0a73"} {"level":"debug","ts":"2026-07-14T15:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9671b13e915730e0e1c7cf067ea4206b95bfd6e454ff6c4cd08d63d6648f0a73","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9671b13e915730e0e1c7cf067ea4206b95bfd6e454ff6c4cd08d63d6648f0a73"} {"level":"debug","ts":"2026-07-14T15:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9671b13e915730e0e1c7cf067ea4206b95bfd6e454ff6c4cd08d63d6648f0a73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:12:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:12:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9671b13e915730e0e1c7cf067ea4206b95bfd6e454ff6c4cd08d63d6648f0a73"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9671b13e915730e0e1c7cf067ea4206b95bfd6e454ff6c4cd08d63d6648f0a73","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9671b13e915730e0e1c7cf067ea4206b95bfd6e454ff6c4cd08d63d6648f0a73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:12:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:12:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9671b13e915730e0e1c7cf067ea4206b95bfd6e454ff6c4cd08d63d6648f0a73","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9671b13e915730e0e1c7cf067ea4206b95bfd6e454ff6c4cd08d63d6648f0a73","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9671b13e915730e0e1c7cf067ea4206b95bfd6e454ff6c4cd08d63d6648f0a73","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9671b13e915730e0e1c7cf067ea4206b95bfd6e454ff6c4cd08d63d6648f0a73"} {"level":"debug","ts":"2026-07-14T15:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9671b13e915730e0e1c7cf067ea4206b95bfd6e454ff6c4cd08d63d6648f0a73","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9671b13e915730e0e1c7cf067ea4206b95bfd6e454ff6c4cd08d63d6648f0a73"} {"level":"debug","ts":"2026-07-14T15:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9671b13e915730e0e1c7cf067ea4206b95bfd6e454ff6c4cd08d63d6648f0a73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:12:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:12:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9671b13e915730e0e1c7cf067ea4206b95bfd6e454ff6c4cd08d63d6648f0a73"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9671b13e915730e0e1c7cf067ea4206b95bfd6e454ff6c4cd08d63d6648f0a73","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9671b13e915730e0e1c7cf067ea4206b95bfd6e454ff6c4cd08d63d6648f0a73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:12:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:12:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9671b13e915730e0e1c7cf067ea4206b95bfd6e454ff6c4cd08d63d6648f0a73","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9671b13e915730e0e1c7cf067ea4206b95bfd6e454ff6c4cd08d63d6648f0a73","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9671b13e915730e0e1c7cf067ea4206b95bfd6e454ff6c4cd08d63d6648f0a73","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9671b13e915730e0e1c7cf067ea4206b95bfd6e454ff6c4cd08d63d6648f0a73"} {"level":"debug","ts":"2026-07-14T15:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9671b13e915730e0e1c7cf067ea4206b95bfd6e454ff6c4cd08d63d6648f0a73","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9671b13e915730e0e1c7cf067ea4206b95bfd6e454ff6c4cd08d63d6648f0a73"} {"level":"debug","ts":"2026-07-14T15:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9671b13e915730e0e1c7cf067ea4206b95bfd6e454ff6c4cd08d63d6648f0a73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:12:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:12:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9671b13e915730e0e1c7cf067ea4206b95bfd6e454ff6c4cd08d63d6648f0a73"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9671b13e915730e0e1c7cf067ea4206b95bfd6e454ff6c4cd08d63d6648f0a73","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9671b13e915730e0e1c7cf067ea4206b95bfd6e454ff6c4cd08d63d6648f0a73","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:12:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9671b13e915730e0e1c7cf067ea4206b95bfd6e454ff6c4cd08d63d6648f0a73"} {"level":"debug","ts":"2026-07-14T15:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9faaa3b56221bb9858111f69b79aa9deea659dbf5df46a50fedd9b72d7bbb265","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9faaa3b56221bb9858111f69b79aa9deea659dbf5df46a50fedd9b72d7bbb265"} {"level":"debug","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31c6b12e5308c987125df9dbe054591bc259e122850c717d4fd6fa56da8a98b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:13:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:13:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31c6b12e5308c987125df9dbe054591bc259e122850c717d4fd6fa56da8a98b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31c6b12e5308c987125df9dbe054591bc259e122850c717d4fd6fa56da8a98b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31c6b12e5308c987125df9dbe054591bc259e122850c717d4fd6fa56da8a98b5"} {"level":"debug","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31c6b12e5308c987125df9dbe054591bc259e122850c717d4fd6fa56da8a98b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31c6b12e5308c987125df9dbe054591bc259e122850c717d4fd6fa56da8a98b5"} {"level":"debug","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31c6b12e5308c987125df9dbe054591bc259e122850c717d4fd6fa56da8a98b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:13:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:13:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31c6b12e5308c987125df9dbe054591bc259e122850c717d4fd6fa56da8a98b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31c6b12e5308c987125df9dbe054591bc259e122850c717d4fd6fa56da8a98b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31c6b12e5308c987125df9dbe054591bc259e122850c717d4fd6fa56da8a98b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:13:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:13:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31c6b12e5308c987125df9dbe054591bc259e122850c717d4fd6fa56da8a98b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31c6b12e5308c987125df9dbe054591bc259e122850c717d4fd6fa56da8a98b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31c6b12e5308c987125df9dbe054591bc259e122850c717d4fd6fa56da8a98b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31c6b12e5308c987125df9dbe054591bc259e122850c717d4fd6fa56da8a98b5"} {"level":"debug","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31c6b12e5308c987125df9dbe054591bc259e122850c717d4fd6fa56da8a98b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31c6b12e5308c987125df9dbe054591bc259e122850c717d4fd6fa56da8a98b5"} {"level":"debug","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"faafb7e7275ab0c9e183ba8f6b97d0b50122dd01f3a2935ea682c31a098fdbfd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/faafb7e7275ab0c9e183ba8f6b97d0b50122dd01f3a2935ea682c31a098fdbfd"} {"level":"debug","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31c6b12e5308c987125df9dbe054591bc259e122850c717d4fd6fa56da8a98b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:13:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:13:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31c6b12e5308c987125df9dbe054591bc259e122850c717d4fd6fa56da8a98b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31c6b12e5308c987125df9dbe054591bc259e122850c717d4fd6fa56da8a98b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31c6b12e5308c987125df9dbe054591bc259e122850c717d4fd6fa56da8a98b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31c6b12e5308c987125df9dbe054591bc259e122850c717d4fd6fa56da8a98b5"} {"level":"debug","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6be90af30f03e34aecafc74c8eaf3895a372be54be7938c6e8704761f8f84d0d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:13:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:13:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6be90af30f03e34aecafc74c8eaf3895a372be54be7938c6e8704761f8f84d0d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6be90af30f03e34aecafc74c8eaf3895a372be54be7938c6e8704761f8f84d0d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6be90af30f03e34aecafc74c8eaf3895a372be54be7938c6e8704761f8f84d0d"} {"level":"debug","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6be90af30f03e34aecafc74c8eaf3895a372be54be7938c6e8704761f8f84d0d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6be90af30f03e34aecafc74c8eaf3895a372be54be7938c6e8704761f8f84d0d"} {"level":"debug","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6be90af30f03e34aecafc74c8eaf3895a372be54be7938c6e8704761f8f84d0d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:13:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:13:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6be90af30f03e34aecafc74c8eaf3895a372be54be7938c6e8704761f8f84d0d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6be90af30f03e34aecafc74c8eaf3895a372be54be7938c6e8704761f8f84d0d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6be90af30f03e34aecafc74c8eaf3895a372be54be7938c6e8704761f8f84d0d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:13:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:13:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6be90af30f03e34aecafc74c8eaf3895a372be54be7938c6e8704761f8f84d0d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6be90af30f03e34aecafc74c8eaf3895a372be54be7938c6e8704761f8f84d0d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6be90af30f03e34aecafc74c8eaf3895a372be54be7938c6e8704761f8f84d0d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6be90af30f03e34aecafc74c8eaf3895a372be54be7938c6e8704761f8f84d0d"} {"level":"debug","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6be90af30f03e34aecafc74c8eaf3895a372be54be7938c6e8704761f8f84d0d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6be90af30f03e34aecafc74c8eaf3895a372be54be7938c6e8704761f8f84d0d"} {"level":"debug","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"604061bd58f8ea487ef30b6275a5670c166e9a232b6f7287a0da92793239fb2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:13:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:13:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"604061bd58f8ea487ef30b6275a5670c166e9a232b6f7287a0da92793239fb2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"604061bd58f8ea487ef30b6275a5670c166e9a232b6f7287a0da92793239fb2e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/604061bd58f8ea487ef30b6275a5670c166e9a232b6f7287a0da92793239fb2e"} {"level":"debug","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"604061bd58f8ea487ef30b6275a5670c166e9a232b6f7287a0da92793239fb2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6be90af30f03e34aecafc74c8eaf3895a372be54be7938c6e8704761f8f84d0d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:13:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:13:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6be90af30f03e34aecafc74c8eaf3895a372be54be7938c6e8704761f8f84d0d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/604061bd58f8ea487ef30b6275a5670c166e9a232b6f7287a0da92793239fb2e"} {"level":"info","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6be90af30f03e34aecafc74c8eaf3895a372be54be7938c6e8704761f8f84d0d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"604061bd58f8ea487ef30b6275a5670c166e9a232b6f7287a0da92793239fb2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:13:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:13:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["604061bd58f8ea487ef30b6275a5670c166e9a232b6f7287a0da92793239fb2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"604061bd58f8ea487ef30b6275a5670c166e9a232b6f7287a0da92793239fb2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6be90af30f03e34aecafc74c8eaf3895a372be54be7938c6e8704761f8f84d0d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:13:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:13:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6be90af30f03e34aecafc74c8eaf3895a372be54be7938c6e8704761f8f84d0d"} {"level":"info","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6be90af30f03e34aecafc74c8eaf3895a372be54be7938c6e8704761f8f84d0d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"604061bd58f8ea487ef30b6275a5670c166e9a232b6f7287a0da92793239fb2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:13:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:13:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/604061bd58f8ea487ef30b6275a5670c166e9a232b6f7287a0da92793239fb2e"} {"level":"info","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"604061bd58f8ea487ef30b6275a5670c166e9a232b6f7287a0da92793239fb2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6be90af30f03e34aecafc74c8eaf3895a372be54be7938c6e8704761f8f84d0d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"604061bd58f8ea487ef30b6275a5670c166e9a232b6f7287a0da92793239fb2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:13:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:13:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["604061bd58f8ea487ef30b6275a5670c166e9a232b6f7287a0da92793239fb2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6be90af30f03e34aecafc74c8eaf3895a372be54be7938c6e8704761f8f84d0d"} {"level":"info","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"604061bd58f8ea487ef30b6275a5670c166e9a232b6f7287a0da92793239fb2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6be90af30f03e34aecafc74c8eaf3895a372be54be7938c6e8704761f8f84d0d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:13:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:13:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6be90af30f03e34aecafc74c8eaf3895a372be54be7938c6e8704761f8f84d0d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6be90af30f03e34aecafc74c8eaf3895a372be54be7938c6e8704761f8f84d0d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"604061bd58f8ea487ef30b6275a5670c166e9a232b6f7287a0da92793239fb2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:13:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:13:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/604061bd58f8ea487ef30b6275a5670c166e9a232b6f7287a0da92793239fb2e"} {"level":"info","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"604061bd58f8ea487ef30b6275a5670c166e9a232b6f7287a0da92793239fb2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6be90af30f03e34aecafc74c8eaf3895a372be54be7938c6e8704761f8f84d0d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:13:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:13:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6be90af30f03e34aecafc74c8eaf3895a372be54be7938c6e8704761f8f84d0d"} {"level":"info","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6be90af30f03e34aecafc74c8eaf3895a372be54be7938c6e8704761f8f84d0d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"604061bd58f8ea487ef30b6275a5670c166e9a232b6f7287a0da92793239fb2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6be90af30f03e34aecafc74c8eaf3895a372be54be7938c6e8704761f8f84d0d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:13:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:13:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6be90af30f03e34aecafc74c8eaf3895a372be54be7938c6e8704761f8f84d0d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/604061bd58f8ea487ef30b6275a5670c166e9a232b6f7287a0da92793239fb2e"} {"level":"info","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6be90af30f03e34aecafc74c8eaf3895a372be54be7938c6e8704761f8f84d0d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"604061bd58f8ea487ef30b6275a5670c166e9a232b6f7287a0da92793239fb2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:13:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:13:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["604061bd58f8ea487ef30b6275a5670c166e9a232b6f7287a0da92793239fb2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"604061bd58f8ea487ef30b6275a5670c166e9a232b6f7287a0da92793239fb2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6be90af30f03e34aecafc74c8eaf3895a372be54be7938c6e8704761f8f84d0d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:13:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:13:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6be90af30f03e34aecafc74c8eaf3895a372be54be7938c6e8704761f8f84d0d"} {"level":"info","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6be90af30f03e34aecafc74c8eaf3895a372be54be7938c6e8704761f8f84d0d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"604061bd58f8ea487ef30b6275a5670c166e9a232b6f7287a0da92793239fb2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:13:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:13:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/604061bd58f8ea487ef30b6275a5670c166e9a232b6f7287a0da92793239fb2e"} {"level":"info","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"604061bd58f8ea487ef30b6275a5670c166e9a232b6f7287a0da92793239fb2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c00961cae08c6a49f1a4e974d73bbb78754a724b52a3e97aeb3ecc416869beaf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6be90af30f03e34aecafc74c8eaf3895a372be54be7938c6e8704761f8f84d0d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"604061bd58f8ea487ef30b6275a5670c166e9a232b6f7287a0da92793239fb2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:13:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:13:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["604061bd58f8ea487ef30b6275a5670c166e9a232b6f7287a0da92793239fb2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"604061bd58f8ea487ef30b6275a5670c166e9a232b6f7287a0da92793239fb2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6be90af30f03e34aecafc74c8eaf3895a372be54be7938c6e8704761f8f84d0d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"604061bd58f8ea487ef30b6275a5670c166e9a232b6f7287a0da92793239fb2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:13:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:13:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["604061bd58f8ea487ef30b6275a5670c166e9a232b6f7287a0da92793239fb2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6be90af30f03e34aecafc74c8eaf3895a372be54be7938c6e8704761f8f84d0d"} {"level":"error","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"604061bd58f8ea487ef30b6275a5670c166e9a232b6f7287a0da92793239fb2e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"604061bd58f8ea487ef30b6275a5670c166e9a232b6f7287a0da92793239fb2e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"604061bd58f8ea487ef30b6275a5670c166e9a232b6f7287a0da92793239fb2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"604061bd58f8ea487ef30b6275a5670c166e9a232b6f7287a0da92793239fb2e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c00961cae08c6a49f1a4e974d73bbb78754a724b52a3e97aeb3ecc416869beaf"} {"level":"debug","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6be90af30f03e34aecafc74c8eaf3895a372be54be7938c6e8704761f8f84d0d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:13:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:13:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6be90af30f03e34aecafc74c8eaf3895a372be54be7938c6e8704761f8f84d0d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/604061bd58f8ea487ef30b6275a5670c166e9a232b6f7287a0da92793239fb2e"} {"level":"info","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6be90af30f03e34aecafc74c8eaf3895a372be54be7938c6e8704761f8f84d0d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6be90af30f03e34aecafc74c8eaf3895a372be54be7938c6e8704761f8f84d0d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:13:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:13:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6be90af30f03e34aecafc74c8eaf3895a372be54be7938c6e8704761f8f84d0d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6be90af30f03e34aecafc74c8eaf3895a372be54be7938c6e8704761f8f84d0d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6be90af30f03e34aecafc74c8eaf3895a372be54be7938c6e8704761f8f84d0d"} {"level":"debug","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6be90af30f03e34aecafc74c8eaf3895a372be54be7938c6e8704761f8f84d0d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6be90af30f03e34aecafc74c8eaf3895a372be54be7938c6e8704761f8f84d0d"} {"level":"debug","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6be90af30f03e34aecafc74c8eaf3895a372be54be7938c6e8704761f8f84d0d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:13:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:13:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6be90af30f03e34aecafc74c8eaf3895a372be54be7938c6e8704761f8f84d0d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6be90af30f03e34aecafc74c8eaf3895a372be54be7938c6e8704761f8f84d0d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6be90af30f03e34aecafc74c8eaf3895a372be54be7938c6e8704761f8f84d0d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:13:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:13:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6be90af30f03e34aecafc74c8eaf3895a372be54be7938c6e8704761f8f84d0d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6be90af30f03e34aecafc74c8eaf3895a372be54be7938c6e8704761f8f84d0d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6be90af30f03e34aecafc74c8eaf3895a372be54be7938c6e8704761f8f84d0d"} {"level":"debug","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6be90af30f03e34aecafc74c8eaf3895a372be54be7938c6e8704761f8f84d0d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6be90af30f03e34aecafc74c8eaf3895a372be54be7938c6e8704761f8f84d0d"} {"level":"debug","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6be90af30f03e34aecafc74c8eaf3895a372be54be7938c6e8704761f8f84d0d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:13:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:13:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6be90af30f03e34aecafc74c8eaf3895a372be54be7938c6e8704761f8f84d0d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6be90af30f03e34aecafc74c8eaf3895a372be54be7938c6e8704761f8f84d0d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c869ed378b6eee38de6e0dc2b1bab7f0abdb1f511f03c708da07d5124d80181f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:13:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:13:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c869ed378b6eee38de6e0dc2b1bab7f0abdb1f511f03c708da07d5124d80181f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6be90af30f03e34aecafc74c8eaf3895a372be54be7938c6e8704761f8f84d0d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c869ed378b6eee38de6e0dc2b1bab7f0abdb1f511f03c708da07d5124d80181f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c869ed378b6eee38de6e0dc2b1bab7f0abdb1f511f03c708da07d5124d80181f"} {"level":"debug","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c869ed378b6eee38de6e0dc2b1bab7f0abdb1f511f03c708da07d5124d80181f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:13:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:13:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c869ed378b6eee38de6e0dc2b1bab7f0abdb1f511f03c708da07d5124d80181f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c869ed378b6eee38de6e0dc2b1bab7f0abdb1f511f03c708da07d5124d80181f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c869ed378b6eee38de6e0dc2b1bab7f0abdb1f511f03c708da07d5124d80181f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6be90af30f03e34aecafc74c8eaf3895a372be54be7938c6e8704761f8f84d0d"} {"level":"info","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c869ed378b6eee38de6e0dc2b1bab7f0abdb1f511f03c708da07d5124d80181f"} {"level":"debug","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ada935e0c6abde3e4cae921ebfb1558778796068704fd1a0a11e62693cba292","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:13:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:13:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ada935e0c6abde3e4cae921ebfb1558778796068704fd1a0a11e62693cba292","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ada935e0c6abde3e4cae921ebfb1558778796068704fd1a0a11e62693cba292","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ada935e0c6abde3e4cae921ebfb1558778796068704fd1a0a11e62693cba292"} {"level":"debug","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ada935e0c6abde3e4cae921ebfb1558778796068704fd1a0a11e62693cba292","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ada935e0c6abde3e4cae921ebfb1558778796068704fd1a0a11e62693cba292","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ada935e0c6abde3e4cae921ebfb1558778796068704fd1a0a11e62693cba292"} {"level":"debug","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53234d6f02f29ca00f0e530dfc5a71c77add75c66fb4a9b1e6ec999855f860b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:13:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:13:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53234d6f02f29ca00f0e530dfc5a71c77add75c66fb4a9b1e6ec999855f860b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53234d6f02f29ca00f0e530dfc5a71c77add75c66fb4a9b1e6ec999855f860b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ada935e0c6abde3e4cae921ebfb1558778796068704fd1a0a11e62693cba292","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:13:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:13:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ada935e0c6abde3e4cae921ebfb1558778796068704fd1a0a11e62693cba292"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ada935e0c6abde3e4cae921ebfb1558778796068704fd1a0a11e62693cba292","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bc4d725b6bf66c6350e078df87b9ec5c38c051c506ea46458e22180f49513d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53234d6f02f29ca00f0e530dfc5a71c77add75c66fb4a9b1e6ec999855f860b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ada935e0c6abde3e4cae921ebfb1558778796068704fd1a0a11e62693cba292","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53234d6f02f29ca00f0e530dfc5a71c77add75c66fb4a9b1e6ec999855f860b8"} {"level":"debug","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53234d6f02f29ca00f0e530dfc5a71c77add75c66fb4a9b1e6ec999855f860b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:13:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:13:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53234d6f02f29ca00f0e530dfc5a71c77add75c66fb4a9b1e6ec999855f860b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bc4d725b6bf66c6350e078df87b9ec5c38c051c506ea46458e22180f49513d0"} {"level":"info","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53234d6f02f29ca00f0e530dfc5a71c77add75c66fb4a9b1e6ec999855f860b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53234d6f02f29ca00f0e530dfc5a71c77add75c66fb4a9b1e6ec999855f860b8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ada935e0c6abde3e4cae921ebfb1558778796068704fd1a0a11e62693cba292"} {"level":"info","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53234d6f02f29ca00f0e530dfc5a71c77add75c66fb4a9b1e6ec999855f860b8"} {"level":"debug","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9488b52e5f33616ac68760e467146bd817520decd0e0ac9b341ac7c1248b40df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:13:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:13:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9488b52e5f33616ac68760e467146bd817520decd0e0ac9b341ac7c1248b40df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9488b52e5f33616ac68760e467146bd817520decd0e0ac9b341ac7c1248b40df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9488b52e5f33616ac68760e467146bd817520decd0e0ac9b341ac7c1248b40df","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9488b52e5f33616ac68760e467146bd817520decd0e0ac9b341ac7c1248b40df"} {"level":"debug","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9488b52e5f33616ac68760e467146bd817520decd0e0ac9b341ac7c1248b40df","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9488b52e5f33616ac68760e467146bd817520decd0e0ac9b341ac7c1248b40df"} {"level":"debug","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9488b52e5f33616ac68760e467146bd817520decd0e0ac9b341ac7c1248b40df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:13:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:13:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9488b52e5f33616ac68760e467146bd817520decd0e0ac9b341ac7c1248b40df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9488b52e5f33616ac68760e467146bd817520decd0e0ac9b341ac7c1248b40df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9488b52e5f33616ac68760e467146bd817520decd0e0ac9b341ac7c1248b40df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9488b52e5f33616ac68760e467146bd817520decd0e0ac9b341ac7c1248b40df"} {"level":"info","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375"} {"level":"debug","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f4a1703447958cab3315055ee7e5a173e8aebd3d60d1917ee4b9e85fe668064","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:13:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:13:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f4a1703447958cab3315055ee7e5a173e8aebd3d60d1917ee4b9e85fe668064","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f4a1703447958cab3315055ee7e5a173e8aebd3d60d1917ee4b9e85fe668064","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f4a1703447958cab3315055ee7e5a173e8aebd3d60d1917ee4b9e85fe668064","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f4a1703447958cab3315055ee7e5a173e8aebd3d60d1917ee4b9e85fe668064"} {"level":"debug","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f4a1703447958cab3315055ee7e5a173e8aebd3d60d1917ee4b9e85fe668064","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f4a1703447958cab3315055ee7e5a173e8aebd3d60d1917ee4b9e85fe668064"} {"level":"debug","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f4a1703447958cab3315055ee7e5a173e8aebd3d60d1917ee4b9e85fe668064","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:13:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:13:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f4a1703447958cab3315055ee7e5a173e8aebd3d60d1917ee4b9e85fe668064"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f4a1703447958cab3315055ee7e5a173e8aebd3d60d1917ee4b9e85fe668064","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9991d7fed1f2b83cca454c9925f2cdbaa086d9bf87ec3e0552495711e6077682","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:13:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:13:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9991d7fed1f2b83cca454c9925f2cdbaa086d9bf87ec3e0552495711e6077682","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f4a1703447958cab3315055ee7e5a173e8aebd3d60d1917ee4b9e85fe668064","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28aa1448daedcbf487763a3ecb505848171ea0c754cc36b45478825e587d91ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9991d7fed1f2b83cca454c9925f2cdbaa086d9bf87ec3e0552495711e6077682","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9991d7fed1f2b83cca454c9925f2cdbaa086d9bf87ec3e0552495711e6077682"} {"level":"debug","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9991d7fed1f2b83cca454c9925f2cdbaa086d9bf87ec3e0552495711e6077682","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:13:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:13:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9991d7fed1f2b83cca454c9925f2cdbaa086d9bf87ec3e0552495711e6077682"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9991d7fed1f2b83cca454c9925f2cdbaa086d9bf87ec3e0552495711e6077682","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ecdb7ab5fb6b920a6001557b58fbe63466db61c8cddc5a54b9cee268b8a52535","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9991d7fed1f2b83cca454c9925f2cdbaa086d9bf87ec3e0552495711e6077682","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f4a1703447958cab3315055ee7e5a173e8aebd3d60d1917ee4b9e85fe668064"} {"level":"debug","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1035d2f0b03a2aae49704cd7cae1a5a7f2fe71327fd84eb9652384103f894957","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28aa1448daedcbf487763a3ecb505848171ea0c754cc36b45478825e587d91ba"} {"level":"info","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9991d7fed1f2b83cca454c9925f2cdbaa086d9bf87ec3e0552495711e6077682"} {"level":"debug","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"988cbaff6135beca86a86c254be45d903351421a84a23b76d4b7a1b74684a6fb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecdb7ab5fb6b920a6001557b58fbe63466db61c8cddc5a54b9cee268b8a52535"} {"level":"debug","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71c44c8a4ea900958cb685a82d140fe06aff12fcc017db8a53477971aee68f85","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1035d2f0b03a2aae49704cd7cae1a5a7f2fe71327fd84eb9652384103f894957"} {"level":"debug","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9671b13e915730e0e1c7cf067ea4206b95bfd6e454ff6c4cd08d63d6648f0a73","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/988cbaff6135beca86a86c254be45d903351421a84a23b76d4b7a1b74684a6fb"} {"level":"debug","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b945e86781c7967aa431f3c76a17c7a84671215f9ed4997886979b5ef1964dd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71c44c8a4ea900958cb685a82d140fe06aff12fcc017db8a53477971aee68f85"} {"level":"debug","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1c9d5b05f94d0f58cd7caaeb0e508cfa4eb11658645a419874be64ec37c4310","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9671b13e915730e0e1c7cf067ea4206b95bfd6e454ff6c4cd08d63d6648f0a73"} {"level":"debug","ts":"2026-07-14T15:13:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e4c9bcd97a59bf4780d11132a77dba0b6009f077fa1fb2afada1e641ddc8186","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:13:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b945e86781c7967aa431f3c76a17c7a84671215f9ed4997886979b5ef1964dd"} {"level":"debug","ts":"2026-07-14T15:13:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ad3d2963286dfc8bb82452471e5fb70b183e3b27645dfc66d8353a5b2fe03bc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:13:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1c9d5b05f94d0f58cd7caaeb0e508cfa4eb11658645a419874be64ec37c4310"} {"level":"info","ts":"2026-07-14T15:13:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e4c9bcd97a59bf4780d11132a77dba0b6009f077fa1fb2afada1e641ddc8186"} {"level":"info","ts":"2026-07-14T15:13:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ad3d2963286dfc8bb82452471e5fb70b183e3b27645dfc66d8353a5b2fe03bc"} {"level":"info","ts":"2026-07-14T15:13:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4c155f70-3b25-44de-b3ff-5f2b9a1d8d2e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:53902","PortSpecifier":{"PortValue":53902}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4c155f70-3b25-44de-b3ff-5f2b9a1d8d2e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ebb1a4.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T15:13:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4c155f70-3b25-44de-b3ff-5f2b9a1d8d2e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:53902","PortSpecifier":{"PortValue":53902}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784041991,"nanos":85459479},"http":{"id":"4c155f70-3b25-44de-b3ff-5f2b9a1d8d2e","method":"POST","headers":{":authority":"e2e-shared-a-ebb1a4.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T15:13:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4c155f70-3b25-44de-b3ff-5f2b9a1d8d2e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T15:13:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4c155f70-3b25-44de-b3ff-5f2b9a1d8d2e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c34cfb71-3058-4b32-8f33-e0d6d7dad951","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a225cdb-1660-4d55-bdaf-f564f742244d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f6461cc0c70f"]}} {"level":"debug","ts":"2026-07-14T15:13:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4c155f70-3b25-44de-b3ff-5f2b9a1d8d2e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f6461cc0c70f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a225cdb-1660-4d55-bdaf-f564f742244d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c34cfb71-3058-4b32-8f33-e0d6d7dad951","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c869ed378b6eee38de6e0dc2b1bab7f0abdb1f511f03c708da07d5124d80181f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ebb1a4.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T15:13:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c155f70-3b25-44de-b3ff-5f2b9a1d8d2e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:13:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c155f70-3b25-44de-b3ff-5f2b9a1d8d2e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:13:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c155f70-3b25-44de-b3ff-5f2b9a1d8d2e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ebb1a4/sub-test-model-ebb1a4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ebb1a4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:13:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4c155f70-3b25-44de-b3ff-5f2b9a1d8d2e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T15:13:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c155f70-3b25-44de-b3ff-5f2b9a1d8d2e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T15:13:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c155f70-3b25-44de-b3ff-5f2b9a1d8d2e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T15:13:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4c155f70-3b25-44de-b3ff-5f2b9a1d8d2e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T15:13:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4c155f70-3b25-44de-b3ff-5f2b9a1d8d2e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T15:13:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e375a448-1639-4408-94e9-237241df6dba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:52630","PortSpecifier":{"PortValue":52630}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e375a448-1639-4408-94e9-237241df6dba","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-747ac7.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T15:13:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e375a448-1639-4408-94e9-237241df6dba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:52630","PortSpecifier":{"PortValue":52630}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784041991,"nanos":127283589},"http":{"id":"e375a448-1639-4408-94e9-237241df6dba","method":"POST","headers":{":authority":"e2e-shared-b-747ac7.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T15:13:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e375a448-1639-4408-94e9-237241df6dba","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T15:13:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e375a448-1639-4408-94e9-237241df6dba","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c34cfb71-3058-4b32-8f33-e0d6d7dad951","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a225cdb-1660-4d55-bdaf-f564f742244d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f6461cc0c70f"]}} {"level":"debug","ts":"2026-07-14T15:13:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e375a448-1639-4408-94e9-237241df6dba","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f6461cc0c70f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a225cdb-1660-4d55-bdaf-f564f742244d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c34cfb71-3058-4b32-8f33-e0d6d7dad951","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4f4a1703447958cab3315055ee7e5a173e8aebd3d60d1917ee4b9e85fe668064"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-747ac7.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T15:13:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e375a448-1639-4408-94e9-237241df6dba","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:13:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e375a448-1639-4408-94e9-237241df6dba","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:13:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e375a448-1639-4408-94e9-237241df6dba","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-747ac7/sub-test-model-747ac7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-747ac7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:13:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e375a448-1639-4408-94e9-237241df6dba","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T15:13:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e375a448-1639-4408-94e9-237241df6dba","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T15:13:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e375a448-1639-4408-94e9-237241df6dba","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T15:13:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e375a448-1639-4408-94e9-237241df6dba","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T15:13:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e375a448-1639-4408-94e9-237241df6dba","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T15:13:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"db3c66ff-9887-4d70-abef-a974eac34c79","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:53904","PortSpecifier":{"PortValue":53904}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"db3c66ff-9887-4d70-abef-a974eac34c79","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-ebb1a4.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T15:13:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"db3c66ff-9887-4d70-abef-a974eac34c79","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:53904","PortSpecifier":{"PortValue":53904}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784041991,"nanos":163329621},"http":{"id":"db3c66ff-9887-4d70-abef-a974eac34c79","method":"GET","headers":{":authority":"e2e-shared-a-ebb1a4.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T15:13:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"db3c66ff-9887-4d70-abef-a974eac34c79","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-170AL94VSKLnMn73q_v3pmpxp2XzwqHDdY6S19PrWqFQwvhu60Suumyn93SrF"} {"level":"debug","ts":"2026-07-14T15:13:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"db3c66ff-9887-4d70-abef-a974eac34c79","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ebb1a4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-170AL94VSKLnMn73q_v3pmpxp2XzwqHDdY6S19PrWqFQwvhu60Suumyn93SrF\"}"} {"level":"debug","ts":"2026-07-14T15:13:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"db3c66ff-9887-4d70-abef-a974eac34c79","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ebb1a4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cd99c750-d9ba-4f9a-bd2b-1ce9e7d8e21e","keyName":"e2e-sub-iso-002b66","subscription":"e2e-a-only-bfdf29","tenant":"e2e-shared-a-ebb1a4","userId":"cd99c750-d9ba-4f9a-bd2b-1ce9e7d8e21e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T15:13:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"db3c66ff-9887-4d70-abef-a974eac34c79","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T15:13:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db3c66ff-9887-4d70-abef-a974eac34c79","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:13:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db3c66ff-9887-4d70-abef-a974eac34c79","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:13:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db3c66ff-9887-4d70-abef-a974eac34c79","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ebb1a4/sub-test-model-ebb1a4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ebb1a4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:13:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"db3c66ff-9887-4d70-abef-a974eac34c79","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T15:13:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"db3c66ff-9887-4d70-abef-a974eac34c79","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T15:13:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"db3c66ff-9887-4d70-abef-a974eac34c79","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-bfdf29"} {"level":"debug","ts":"2026-07-14T15:13:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"db3c66ff-9887-4d70-abef-a974eac34c79","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-14T15:13:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"db3c66ff-9887-4d70-abef-a974eac34c79","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T15:13:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"db3c66ff-9887-4d70-abef-a974eac34c79","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T15:13:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e72f1110-081c-4ca5-8159-d8232f38b866","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:52644","PortSpecifier":{"PortValue":52644}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e72f1110-081c-4ca5-8159-d8232f38b866","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-747ac7.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T15:13:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e72f1110-081c-4ca5-8159-d8232f38b866","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:52644","PortSpecifier":{"PortValue":52644}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784041991,"nanos":194376854},"http":{"id":"e72f1110-081c-4ca5-8159-d8232f38b866","method":"GET","headers":{":authority":"e2e-shared-b-747ac7.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T15:13:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e72f1110-081c-4ca5-8159-d8232f38b866","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-FH2lh8weoq2oTznC_n6SbsgB7pnc14k0tISzvOJKL4ceuD2m4SN32zq1EYpu"} {"level":"debug","ts":"2026-07-14T15:13:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e72f1110-081c-4ca5-8159-d8232f38b866","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-747ac7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-FH2lh8weoq2oTznC_n6SbsgB7pnc14k0tISzvOJKL4ceuD2m4SN32zq1EYpu\"}"} {"level":"debug","ts":"2026-07-14T15:13:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e72f1110-081c-4ca5-8159-d8232f38b866","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-747ac7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"dfb239e5-8a9a-47dd-8407-16c7a1fc332b","keyName":"e2e-sub-iso-322253","subscription":"e2e-b-only-bfdf29","tenant":"e2e-shared-b-747ac7","userId":"dfb239e5-8a9a-47dd-8407-16c7a1fc332b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T15:13:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e72f1110-081c-4ca5-8159-d8232f38b866","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T15:13:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e72f1110-081c-4ca5-8159-d8232f38b866","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:13:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e72f1110-081c-4ca5-8159-d8232f38b866","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:13:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e72f1110-081c-4ca5-8159-d8232f38b866","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-747ac7/sub-test-model-747ac7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-747ac7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:13:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e72f1110-081c-4ca5-8159-d8232f38b866","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T15:13:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e72f1110-081c-4ca5-8159-d8232f38b866","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-14T15:13:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e72f1110-081c-4ca5-8159-d8232f38b866","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T15:13:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e72f1110-081c-4ca5-8159-d8232f38b866","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-bfdf29"} {"level":"info","ts":"2026-07-14T15:13:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e72f1110-081c-4ca5-8159-d8232f38b866","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T15:13:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e72f1110-081c-4ca5-8159-d8232f38b866","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T15:13:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bf5fda81-0a12-4061-9773-20a821b09395","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:37850","PortSpecifier":{"PortValue":37850}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bf5fda81-0a12-4061-9773-20a821b09395","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ebb1a4.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T15:13:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bf5fda81-0a12-4061-9773-20a821b09395","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:37850","PortSpecifier":{"PortValue":37850}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784042001,"nanos":441185404},"http":{"id":"bf5fda81-0a12-4061-9773-20a821b09395","method":"POST","headers":{":authority":"e2e-shared-a-ebb1a4.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T15:13:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bf5fda81-0a12-4061-9773-20a821b09395","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T15:13:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bf5fda81-0a12-4061-9773-20a821b09395","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c34cfb71-3058-4b32-8f33-e0d6d7dad951","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a225cdb-1660-4d55-bdaf-f564f742244d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f6461cc0c70f"]}} {"level":"debug","ts":"2026-07-14T15:13:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bf5fda81-0a12-4061-9773-20a821b09395","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f6461cc0c70f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a225cdb-1660-4d55-bdaf-f564f742244d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c34cfb71-3058-4b32-8f33-e0d6d7dad951","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c869ed378b6eee38de6e0dc2b1bab7f0abdb1f511f03c708da07d5124d80181f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ebb1a4.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T15:13:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf5fda81-0a12-4061-9773-20a821b09395","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:13:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf5fda81-0a12-4061-9773-20a821b09395","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:13:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf5fda81-0a12-4061-9773-20a821b09395","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ebb1a4/sub-test-model-ebb1a4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ebb1a4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:13:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bf5fda81-0a12-4061-9773-20a821b09395","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T15:13:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf5fda81-0a12-4061-9773-20a821b09395","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T15:13:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf5fda81-0a12-4061-9773-20a821b09395","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T15:13:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bf5fda81-0a12-4061-9773-20a821b09395","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T15:13:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bf5fda81-0a12-4061-9773-20a821b09395","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T15:13:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d4b849e1-4dc2-47a9-ae9f-235aa5d9d7d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:39398","PortSpecifier":{"PortValue":39398}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d4b849e1-4dc2-47a9-ae9f-235aa5d9d7d3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-747ac7.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T15:13:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d4b849e1-4dc2-47a9-ae9f-235aa5d9d7d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:39398","PortSpecifier":{"PortValue":39398}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784042001,"nanos":482898348},"http":{"id":"d4b849e1-4dc2-47a9-ae9f-235aa5d9d7d3","method":"POST","headers":{":authority":"e2e-shared-b-747ac7.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T15:13:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d4b849e1-4dc2-47a9-ae9f-235aa5d9d7d3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T15:13:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d4b849e1-4dc2-47a9-ae9f-235aa5d9d7d3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c34cfb71-3058-4b32-8f33-e0d6d7dad951","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a225cdb-1660-4d55-bdaf-f564f742244d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f6461cc0c70f"]}} {"level":"debug","ts":"2026-07-14T15:13:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d4b849e1-4dc2-47a9-ae9f-235aa5d9d7d3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f6461cc0c70f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a225cdb-1660-4d55-bdaf-f564f742244d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c34cfb71-3058-4b32-8f33-e0d6d7dad951","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4f4a1703447958cab3315055ee7e5a173e8aebd3d60d1917ee4b9e85fe668064"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-747ac7.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T15:13:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d4b849e1-4dc2-47a9-ae9f-235aa5d9d7d3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:13:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d4b849e1-4dc2-47a9-ae9f-235aa5d9d7d3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:13:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d4b849e1-4dc2-47a9-ae9f-235aa5d9d7d3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-747ac7/sub-test-model-747ac7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-747ac7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:13:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d4b849e1-4dc2-47a9-ae9f-235aa5d9d7d3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T15:13:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d4b849e1-4dc2-47a9-ae9f-235aa5d9d7d3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T15:13:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d4b849e1-4dc2-47a9-ae9f-235aa5d9d7d3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T15:13:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d4b849e1-4dc2-47a9-ae9f-235aa5d9d7d3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T15:13:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d4b849e1-4dc2-47a9-ae9f-235aa5d9d7d3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T15:13:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"718f8963-13ee-431a-a007-194600204b6e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:37862","PortSpecifier":{"PortValue":37862}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"718f8963-13ee-431a-a007-194600204b6e","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-ebb1a4.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T15:13:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"718f8963-13ee-431a-a007-194600204b6e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:37862","PortSpecifier":{"PortValue":37862}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784042001,"nanos":521436890},"http":{"id":"718f8963-13ee-431a-a007-194600204b6e","method":"POST","headers":{":authority":"e2e-shared-a-ebb1a4.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T15:13:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"718f8963-13ee-431a-a007-194600204b6e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-mqXFmS2fQsJEUOvT_qpdEkgRzt0dRGlUlr8mZWxQTYEydJlZaCd1pcBlkqT7"} {"level":"debug","ts":"2026-07-14T15:13:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"718f8963-13ee-431a-a007-194600204b6e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ebb1a4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-mqXFmS2fQsJEUOvT_qpdEkgRzt0dRGlUlr8mZWxQTYEydJlZaCd1pcBlkqT7\"}"} {"level":"debug","ts":"2026-07-14T15:13:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"718f8963-13ee-431a-a007-194600204b6e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ebb1a4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d3953712-836a-4f45-850c-dbb80bc93154","keyName":"e2e-sub-iso-8b8b0f","subscription":"e2e-shared-sub-49d0bf","tenant":"e2e-shared-a-ebb1a4","userId":"d3953712-836a-4f45-850c-dbb80bc93154","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T15:13:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"718f8963-13ee-431a-a007-194600204b6e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T15:13:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"718f8963-13ee-431a-a007-194600204b6e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:13:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"718f8963-13ee-431a-a007-194600204b6e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:13:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"718f8963-13ee-431a-a007-194600204b6e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ebb1a4/sub-test-model-ebb1a4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ebb1a4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:13:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"718f8963-13ee-431a-a007-194600204b6e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T15:13:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"718f8963-13ee-431a-a007-194600204b6e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T15:13:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"718f8963-13ee-431a-a007-194600204b6e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-49d0bf"} {"level":"debug","ts":"2026-07-14T15:13:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"718f8963-13ee-431a-a007-194600204b6e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-14T15:13:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"718f8963-13ee-431a-a007-194600204b6e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T15:13:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"718f8963-13ee-431a-a007-194600204b6e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T15:13:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"de8c1413-6de3-4c44-b4d2-da396c31683c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:39414","PortSpecifier":{"PortValue":39414}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"de8c1413-6de3-4c44-b4d2-da396c31683c","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-747ac7.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T15:13:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"de8c1413-6de3-4c44-b4d2-da396c31683c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:39414","PortSpecifier":{"PortValue":39414}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784042001,"nanos":559287177},"http":{"id":"de8c1413-6de3-4c44-b4d2-da396c31683c","method":"POST","headers":{":authority":"e2e-shared-b-747ac7.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T15:13:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"de8c1413-6de3-4c44-b4d2-da396c31683c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1RSv8t8C9I1ZEwb4N_M4hTDYf63sxANEBVQ9tkSK7cU917fBO11Qcnpu5RZGH"} {"level":"debug","ts":"2026-07-14T15:13:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"de8c1413-6de3-4c44-b4d2-da396c31683c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-747ac7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1RSv8t8C9I1ZEwb4N_M4hTDYf63sxANEBVQ9tkSK7cU917fBO11Qcnpu5RZGH\"}"} {"level":"debug","ts":"2026-07-14T15:13:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"de8c1413-6de3-4c44-b4d2-da396c31683c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-747ac7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1e636a1b-9269-4da7-99a1-efc5daf347a9","keyName":"e2e-sub-iso-a82b97","subscription":"e2e-shared-sub-49d0bf","tenant":"e2e-shared-b-747ac7","userId":"1e636a1b-9269-4da7-99a1-efc5daf347a9","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T15:13:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"de8c1413-6de3-4c44-b4d2-da396c31683c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T15:13:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"de8c1413-6de3-4c44-b4d2-da396c31683c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:13:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"de8c1413-6de3-4c44-b4d2-da396c31683c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:13:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"de8c1413-6de3-4c44-b4d2-da396c31683c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-747ac7/sub-test-model-747ac7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-747ac7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:13:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"de8c1413-6de3-4c44-b4d2-da396c31683c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T15:13:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"de8c1413-6de3-4c44-b4d2-da396c31683c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-14T15:13:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"de8c1413-6de3-4c44-b4d2-da396c31683c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T15:13:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"de8c1413-6de3-4c44-b4d2-da396c31683c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-49d0bf"} {"level":"info","ts":"2026-07-14T15:13:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"de8c1413-6de3-4c44-b4d2-da396c31683c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T15:13:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"de8c1413-6de3-4c44-b4d2-da396c31683c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T15:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c00961cae08c6a49f1a4e974d73bbb78754a724b52a3e97aeb3ecc416869beaf"} {"level":"info","ts":"2026-07-14T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1035d2f0b03a2aae49704cd7cae1a5a7f2fe71327fd84eb9652384103f894957"} {"level":"info","ts":"2026-07-14T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9671b13e915730e0e1c7cf067ea4206b95bfd6e454ff6c4cd08d63d6648f0a73"} {"level":"info","ts":"2026-07-14T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5bc4d725b6bf66c6350e078df87b9ec5c38c051c506ea46458e22180f49513d0"} {"level":"info","ts":"2026-07-14T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/faafb7e7275ab0c9e183ba8f6b97d0b50122dd01f3a2935ea682c31a098fdbfd"} {"level":"info","ts":"2026-07-14T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/988cbaff6135beca86a86c254be45d903351421a84a23b76d4b7a1b74684a6fb"} {"level":"info","ts":"2026-07-14T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9faaa3b56221bb9858111f69b79aa9deea659dbf5df46a50fedd9b72d7bbb265"} {"level":"info","ts":"2026-07-14T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6b945e86781c7967aa431f3c76a17c7a84671215f9ed4997886979b5ef1964dd"} {"level":"info","ts":"2026-07-14T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/53234d6f02f29ca00f0e530dfc5a71c77add75c66fb4a9b1e6ec999855f860b8"} {"level":"info","ts":"2026-07-14T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9991d7fed1f2b83cca454c9925f2cdbaa086d9bf87ec3e0552495711e6077682"} {"level":"info","ts":"2026-07-14T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9488b52e5f33616ac68760e467146bd817520decd0e0ac9b341ac7c1248b40df"} {"level":"info","ts":"2026-07-14T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ada935e0c6abde3e4cae921ebfb1558778796068704fd1a0a11e62693cba292"} {"level":"info","ts":"2026-07-14T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ecdb7ab5fb6b920a6001557b58fbe63466db61c8cddc5a54b9cee268b8a52535"} {"level":"info","ts":"2026-07-14T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3e4c9bcd97a59bf4780d11132a77dba0b6009f077fa1fb2afada1e641ddc8186"} {"level":"info","ts":"2026-07-14T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/31c6b12e5308c987125df9dbe054591bc259e122850c717d4fd6fa56da8a98b5"} {"level":"info","ts":"2026-07-14T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/71c44c8a4ea900958cb685a82d140fe06aff12fcc017db8a53477971aee68f85"} {"level":"debug","ts":"2026-07-14T15:13:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4175e5b0fc452c7df42409b66698993493921e694c0c77843db56dbb72f576f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:13:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:13:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4175e5b0fc452c7df42409b66698993493921e694c0c77843db56dbb72f576f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4175e5b0fc452c7df42409b66698993493921e694c0c77843db56dbb72f576f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:13:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:13:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4175e5b0fc452c7df42409b66698993493921e694c0c77843db56dbb72f576f8"} {"level":"info","ts":"2026-07-14T15:13:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4175e5b0fc452c7df42409b66698993493921e694c0c77843db56dbb72f576f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4175e5b0fc452c7df42409b66698993493921e694c0c77843db56dbb72f576f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:13:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:13:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T15:13:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4175e5b0fc452c7df42409b66698993493921e694c0c77843db56dbb72f576f8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4175e5b0fc452c7df42409b66698993493921e694c0c77843db56dbb72f576f8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T15:13:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4175e5b0fc452c7df42409b66698993493921e694c0c77843db56dbb72f576f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4175e5b0fc452c7df42409b66698993493921e694c0c77843db56dbb72f576f8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:13:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4175e5b0fc452c7df42409b66698993493921e694c0c77843db56dbb72f576f8"} {"level":"info","ts":"2026-07-14T15:13:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4175e5b0fc452c7df42409b66698993493921e694c0c77843db56dbb72f576f8"} {"level":"debug","ts":"2026-07-14T15:13:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54c73acb141217a0bf6354452bb50072e5bfee74a08ef994eccb025f9b4f0b6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:13:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:13:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54c73acb141217a0bf6354452bb50072e5bfee74a08ef994eccb025f9b4f0b6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54c73acb141217a0bf6354452bb50072e5bfee74a08ef994eccb025f9b4f0b6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:13:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:13:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54c73acb141217a0bf6354452bb50072e5bfee74a08ef994eccb025f9b4f0b6a"} {"level":"info","ts":"2026-07-14T15:13:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54c73acb141217a0bf6354452bb50072e5bfee74a08ef994eccb025f9b4f0b6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4175e5b0fc452c7df42409b66698993493921e694c0c77843db56dbb72f576f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:13:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:13:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4175e5b0fc452c7df42409b66698993493921e694c0c77843db56dbb72f576f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54c73acb141217a0bf6354452bb50072e5bfee74a08ef994eccb025f9b4f0b6a"} {"level":"info","ts":"2026-07-14T15:13:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4175e5b0fc452c7df42409b66698993493921e694c0c77843db56dbb72f576f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54c73acb141217a0bf6354452bb50072e5bfee74a08ef994eccb025f9b4f0b6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4175e5b0fc452c7df42409b66698993493921e694c0c77843db56dbb72f576f8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:13:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54c73acb141217a0bf6354452bb50072e5bfee74a08ef994eccb025f9b4f0b6a"} {"level":"debug","ts":"2026-07-14T15:13:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54c73acb141217a0bf6354452bb50072e5bfee74a08ef994eccb025f9b4f0b6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:13:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:13:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54c73acb141217a0bf6354452bb50072e5bfee74a08ef994eccb025f9b4f0b6a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4175e5b0fc452c7df42409b66698993493921e694c0c77843db56dbb72f576f8"} {"level":"info","ts":"2026-07-14T15:13:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54c73acb141217a0bf6354452bb50072e5bfee74a08ef994eccb025f9b4f0b6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54c73acb141217a0bf6354452bb50072e5bfee74a08ef994eccb025f9b4f0b6a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54c73acb141217a0bf6354452bb50072e5bfee74a08ef994eccb025f9b4f0b6a"} {"level":"debug","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f84304e9bfef82d412262ec2265e7059d79629f6dc867ae33ed959ca023eed45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:13:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:13:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f84304e9bfef82d412262ec2265e7059d79629f6dc867ae33ed959ca023eed45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f84304e9bfef82d412262ec2265e7059d79629f6dc867ae33ed959ca023eed45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f84304e9bfef82d412262ec2265e7059d79629f6dc867ae33ed959ca023eed45","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f84304e9bfef82d412262ec2265e7059d79629f6dc867ae33ed959ca023eed45"} {"level":"debug","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f84304e9bfef82d412262ec2265e7059d79629f6dc867ae33ed959ca023eed45","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f84304e9bfef82d412262ec2265e7059d79629f6dc867ae33ed959ca023eed45"} {"level":"debug","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f84304e9bfef82d412262ec2265e7059d79629f6dc867ae33ed959ca023eed45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:13:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:13:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f84304e9bfef82d412262ec2265e7059d79629f6dc867ae33ed959ca023eed45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f84304e9bfef82d412262ec2265e7059d79629f6dc867ae33ed959ca023eed45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f84304e9bfef82d412262ec2265e7059d79629f6dc867ae33ed959ca023eed45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:13:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:13:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f84304e9bfef82d412262ec2265e7059d79629f6dc867ae33ed959ca023eed45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f576862da9f1396985c4d9d2daed352f6b839705ad896cc942540400fb93e3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:13:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:13:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f84304e9bfef82d412262ec2265e7059d79629f6dc867ae33ed959ca023eed45"} {"level":"info","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f576862da9f1396985c4d9d2daed352f6b839705ad896cc942540400fb93e3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f84304e9bfef82d412262ec2265e7059d79629f6dc867ae33ed959ca023eed45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:13:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:13:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f84304e9bfef82d412262ec2265e7059d79629f6dc867ae33ed959ca023eed45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f576862da9f1396985c4d9d2daed352f6b839705ad896cc942540400fb93e3d"} {"level":"info","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f84304e9bfef82d412262ec2265e7059d79629f6dc867ae33ed959ca023eed45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f576862da9f1396985c4d9d2daed352f6b839705ad896cc942540400fb93e3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:13:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:13:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f576862da9f1396985c4d9d2daed352f6b839705ad896cc942540400fb93e3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f84304e9bfef82d412262ec2265e7059d79629f6dc867ae33ed959ca023eed45"} {"level":"info","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f576862da9f1396985c4d9d2daed352f6b839705ad896cc942540400fb93e3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f84304e9bfef82d412262ec2265e7059d79629f6dc867ae33ed959ca023eed45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f576862da9f1396985c4d9d2daed352f6b839705ad896cc942540400fb93e3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:13:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:13:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f576862da9f1396985c4d9d2daed352f6b839705ad896cc942540400fb93e3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f576862da9f1396985c4d9d2daed352f6b839705ad896cc942540400fb93e3d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f576862da9f1396985c4d9d2daed352f6b839705ad896cc942540400fb93e3d"} {"level":"debug","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f576862da9f1396985c4d9d2daed352f6b839705ad896cc942540400fb93e3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:13:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:13:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f576862da9f1396985c4d9d2daed352f6b839705ad896cc942540400fb93e3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f576862da9f1396985c4d9d2daed352f6b839705ad896cc942540400fb93e3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f576862da9f1396985c4d9d2daed352f6b839705ad896cc942540400fb93e3d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f84304e9bfef82d412262ec2265e7059d79629f6dc867ae33ed959ca023eed45"} {"level":"debug","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d22bb89d77cf81926d68870abc88ebd231bfbbb265c959a739544054bcd44b3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:13:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:13:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d22bb89d77cf81926d68870abc88ebd231bfbbb265c959a739544054bcd44b3f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f576862da9f1396985c4d9d2daed352f6b839705ad896cc942540400fb93e3d"} {"level":"debug","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d22bb89d77cf81926d68870abc88ebd231bfbbb265c959a739544054bcd44b3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:13:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:13:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d22bb89d77cf81926d68870abc88ebd231bfbbb265c959a739544054bcd44b3f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d22bb89d77cf81926d68870abc88ebd231bfbbb265c959a739544054bcd44b3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:13:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:13:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d22bb89d77cf81926d68870abc88ebd231bfbbb265c959a739544054bcd44b3f"} {"level":"error","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d22bb89d77cf81926d68870abc88ebd231bfbbb265c959a739544054bcd44b3f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d22bb89d77cf81926d68870abc88ebd231bfbbb265c959a739544054bcd44b3f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d22bb89d77cf81926d68870abc88ebd231bfbbb265c959a739544054bcd44b3f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d22bb89d77cf81926d68870abc88ebd231bfbbb265c959a739544054bcd44b3f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d22bb89d77cf81926d68870abc88ebd231bfbbb265c959a739544054bcd44b3f"} {"level":"debug","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"805d8a63f690215c3b91f5755340020a8f04487b5293e5c121396ef8eefb6521","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:13:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:13:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"805d8a63f690215c3b91f5755340020a8f04487b5293e5c121396ef8eefb6521","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"805d8a63f690215c3b91f5755340020a8f04487b5293e5c121396ef8eefb6521","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9be56ef9615814dd12949bbc1478e24d2baae5b17c6f6b240b1cbb3d87bbf3c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:13:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:13:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9be56ef9615814dd12949bbc1478e24d2baae5b17c6f6b240b1cbb3d87bbf3c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"805d8a63f690215c3b91f5755340020a8f04487b5293e5c121396ef8eefb6521","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d22bb89d77cf81926d68870abc88ebd231bfbbb265c959a739544054bcd44b3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:13:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:13:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d22bb89d77cf81926d68870abc88ebd231bfbbb265c959a739544054bcd44b3f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/805d8a63f690215c3b91f5755340020a8f04487b5293e5c121396ef8eefb6521"} {"level":"info","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d22bb89d77cf81926d68870abc88ebd231bfbbb265c959a739544054bcd44b3f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9be56ef9615814dd12949bbc1478e24d2baae5b17c6f6b240b1cbb3d87bbf3c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:13:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:13:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9be56ef9615814dd12949bbc1478e24d2baae5b17c6f6b240b1cbb3d87bbf3c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d22bb89d77cf81926d68870abc88ebd231bfbbb265c959a739544054bcd44b3f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"805d8a63f690215c3b91f5755340020a8f04487b5293e5c121396ef8eefb6521","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:13:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:13:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["805d8a63f690215c3b91f5755340020a8f04487b5293e5c121396ef8eefb6521"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"805d8a63f690215c3b91f5755340020a8f04487b5293e5c121396ef8eefb6521","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9be56ef9615814dd12949bbc1478e24d2baae5b17c6f6b240b1cbb3d87bbf3c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"805d8a63f690215c3b91f5755340020a8f04487b5293e5c121396ef8eefb6521","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9be56ef9615814dd12949bbc1478e24d2baae5b17c6f6b240b1cbb3d87bbf3c7"} {"level":"debug","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9be56ef9615814dd12949bbc1478e24d2baae5b17c6f6b240b1cbb3d87bbf3c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:13:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:13:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9be56ef9615814dd12949bbc1478e24d2baae5b17c6f6b240b1cbb3d87bbf3c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/805d8a63f690215c3b91f5755340020a8f04487b5293e5c121396ef8eefb6521"} {"level":"info","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9be56ef9615814dd12949bbc1478e24d2baae5b17c6f6b240b1cbb3d87bbf3c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9be56ef9615814dd12949bbc1478e24d2baae5b17c6f6b240b1cbb3d87bbf3c7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d22bb89d77cf81926d68870abc88ebd231bfbbb265c959a739544054bcd44b3f"} {"level":"info","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9be56ef9615814dd12949bbc1478e24d2baae5b17c6f6b240b1cbb3d87bbf3c7"} {"level":"debug","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:13:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:13:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:13:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:13:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce"} {"level":"info","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:13:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:13:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce"} {"level":"info","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce"} {"level":"debug","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:13:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:13:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:13:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:13:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce"} {"level":"debug","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce"} {"level":"debug","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:13:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:13:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:13:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:13:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce"} {"level":"debug","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce"} {"level":"debug","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:13:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:13:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:13:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:13:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce"} {"level":"debug","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce"} {"level":"debug","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:13:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:13:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:13:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:13:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce"} {"level":"debug","ts":"2026-07-14T15:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce"} {"level":"debug","ts":"2026-07-14T15:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:13:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:13:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:13:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:13:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce"} {"level":"debug","ts":"2026-07-14T15:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce"} {"level":"debug","ts":"2026-07-14T15:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:13:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:13:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:13:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:13:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce"} {"level":"debug","ts":"2026-07-14T15:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce"} {"level":"debug","ts":"2026-07-14T15:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:13:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:13:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:13:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:13:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce"} {"level":"debug","ts":"2026-07-14T15:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce"} {"level":"debug","ts":"2026-07-14T15:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:13:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:13:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce"} {"level":"debug","ts":"2026-07-14T15:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a845459c300a342f45df4bd8d697f2308a435236ecbdc17c02fad53465b432a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:13:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:13:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a845459c300a342f45df4bd8d697f2308a435236ecbdc17c02fad53465b432a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a845459c300a342f45df4bd8d697f2308a435236ecbdc17c02fad53465b432a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:13:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:13:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a845459c300a342f45df4bd8d697f2308a435236ecbdc17c02fad53465b432a4"} {"level":"info","ts":"2026-07-14T15:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a845459c300a342f45df4bd8d697f2308a435236ecbdc17c02fad53465b432a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a845459c300a342f45df4bd8d697f2308a435236ecbdc17c02fad53465b432a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:13:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:13:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a845459c300a342f45df4bd8d697f2308a435236ecbdc17c02fad53465b432a4"} {"level":"error","ts":"2026-07-14T15:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a845459c300a342f45df4bd8d697f2308a435236ecbdc17c02fad53465b432a4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a845459c300a342f45df4bd8d697f2308a435236ecbdc17c02fad53465b432a4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T15:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a845459c300a342f45df4bd8d697f2308a435236ecbdc17c02fad53465b432a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a845459c300a342f45df4bd8d697f2308a435236ecbdc17c02fad53465b432a4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a845459c300a342f45df4bd8d697f2308a435236ecbdc17c02fad53465b432a4"} {"level":"debug","ts":"2026-07-14T15:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a845459c300a342f45df4bd8d697f2308a435236ecbdc17c02fad53465b432a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:13:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:13:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a845459c300a342f45df4bd8d697f2308a435236ecbdc17c02fad53465b432a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a845459c300a342f45df4bd8d697f2308a435236ecbdc17c02fad53465b432a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a845459c300a342f45df4bd8d697f2308a435236ecbdc17c02fad53465b432a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:13:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:13:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a845459c300a342f45df4bd8d697f2308a435236ecbdc17c02fad53465b432a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a845459c300a342f45df4bd8d697f2308a435236ecbdc17c02fad53465b432a4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a845459c300a342f45df4bd8d697f2308a435236ecbdc17c02fad53465b432a4"} {"level":"debug","ts":"2026-07-14T15:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a845459c300a342f45df4bd8d697f2308a435236ecbdc17c02fad53465b432a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a845459c300a342f45df4bd8d697f2308a435236ecbdc17c02fad53465b432a4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a845459c300a342f45df4bd8d697f2308a435236ecbdc17c02fad53465b432a4"} {"level":"debug","ts":"2026-07-14T15:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a845459c300a342f45df4bd8d697f2308a435236ecbdc17c02fad53465b432a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:13:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:13:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a845459c300a342f45df4bd8d697f2308a435236ecbdc17c02fad53465b432a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a845459c300a342f45df4bd8d697f2308a435236ecbdc17c02fad53465b432a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a845459c300a342f45df4bd8d697f2308a435236ecbdc17c02fad53465b432a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:13:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:13:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a845459c300a342f45df4bd8d697f2308a435236ecbdc17c02fad53465b432a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a845459c300a342f45df4bd8d697f2308a435236ecbdc17c02fad53465b432a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a845459c300a342f45df4bd8d697f2308a435236ecbdc17c02fad53465b432a4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a845459c300a342f45df4bd8d697f2308a435236ecbdc17c02fad53465b432a4"} {"level":"debug","ts":"2026-07-14T15:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a845459c300a342f45df4bd8d697f2308a435236ecbdc17c02fad53465b432a4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a845459c300a342f45df4bd8d697f2308a435236ecbdc17c02fad53465b432a4"} {"level":"debug","ts":"2026-07-14T15:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a845459c300a342f45df4bd8d697f2308a435236ecbdc17c02fad53465b432a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:13:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:13:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a845459c300a342f45df4bd8d697f2308a435236ecbdc17c02fad53465b432a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a845459c300a342f45df4bd8d697f2308a435236ecbdc17c02fad53465b432a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a845459c300a342f45df4bd8d697f2308a435236ecbdc17c02fad53465b432a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:13:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:13:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a845459c300a342f45df4bd8d697f2308a435236ecbdc17c02fad53465b432a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a845459c300a342f45df4bd8d697f2308a435236ecbdc17c02fad53465b432a4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a845459c300a342f45df4bd8d697f2308a435236ecbdc17c02fad53465b432a4"} {"level":"debug","ts":"2026-07-14T15:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a845459c300a342f45df4bd8d697f2308a435236ecbdc17c02fad53465b432a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a845459c300a342f45df4bd8d697f2308a435236ecbdc17c02fad53465b432a4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:13:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a845459c300a342f45df4bd8d697f2308a435236ecbdc17c02fad53465b432a4"} {"level":"debug","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a845459c300a342f45df4bd8d697f2308a435236ecbdc17c02fad53465b432a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:14:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:14:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a845459c300a342f45df4bd8d697f2308a435236ecbdc17c02fad53465b432a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a845459c300a342f45df4bd8d697f2308a435236ecbdc17c02fad53465b432a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a845459c300a342f45df4bd8d697f2308a435236ecbdc17c02fad53465b432a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:14:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:14:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a845459c300a342f45df4bd8d697f2308a435236ecbdc17c02fad53465b432a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a845459c300a342f45df4bd8d697f2308a435236ecbdc17c02fad53465b432a4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a845459c300a342f45df4bd8d697f2308a435236ecbdc17c02fad53465b432a4"} {"level":"debug","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a845459c300a342f45df4bd8d697f2308a435236ecbdc17c02fad53465b432a4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a845459c300a342f45df4bd8d697f2308a435236ecbdc17c02fad53465b432a4"} {"level":"debug","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a845459c300a342f45df4bd8d697f2308a435236ecbdc17c02fad53465b432a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:14:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:14:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a845459c300a342f45df4bd8d697f2308a435236ecbdc17c02fad53465b432a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a845459c300a342f45df4bd8d697f2308a435236ecbdc17c02fad53465b432a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d0518cceaf532e6576923b79953cf44c35d9fc6fcdfd5c6be4755dd029a9cb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:14:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:14:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d0518cceaf532e6576923b79953cf44c35d9fc6fcdfd5c6be4755dd029a9cb5"} {"level":"info","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d0518cceaf532e6576923b79953cf44c35d9fc6fcdfd5c6be4755dd029a9cb5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a845459c300a342f45df4bd8d697f2308a435236ecbdc17c02fad53465b432a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:14:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:14:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a845459c300a342f45df4bd8d697f2308a435236ecbdc17c02fad53465b432a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d0518cceaf532e6576923b79953cf44c35d9fc6fcdfd5c6be4755dd029a9cb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:14:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:14:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d0518cceaf532e6576923b79953cf44c35d9fc6fcdfd5c6be4755dd029a9cb5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a845459c300a342f45df4bd8d697f2308a435236ecbdc17c02fad53465b432a4"} {"level":"info","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d0518cceaf532e6576923b79953cf44c35d9fc6fcdfd5c6be4755dd029a9cb5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a845459c300a342f45df4bd8d697f2308a435236ecbdc17c02fad53465b432a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:14:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:14:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a845459c300a342f45df4bd8d697f2308a435236ecbdc17c02fad53465b432a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d0518cceaf532e6576923b79953cf44c35d9fc6fcdfd5c6be4755dd029a9cb5"} {"level":"info","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a845459c300a342f45df4bd8d697f2308a435236ecbdc17c02fad53465b432a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d0518cceaf532e6576923b79953cf44c35d9fc6fcdfd5c6be4755dd029a9cb5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a845459c300a342f45df4bd8d697f2308a435236ecbdc17c02fad53465b432a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:14:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:14:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a845459c300a342f45df4bd8d697f2308a435236ecbdc17c02fad53465b432a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a845459c300a342f45df4bd8d697f2308a435236ecbdc17c02fad53465b432a4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a845459c300a342f45df4bd8d697f2308a435236ecbdc17c02fad53465b432a4"} {"level":"debug","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a845459c300a342f45df4bd8d697f2308a435236ecbdc17c02fad53465b432a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:14:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:14:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a845459c300a342f45df4bd8d697f2308a435236ecbdc17c02fad53465b432a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a845459c300a342f45df4bd8d697f2308a435236ecbdc17c02fad53465b432a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a845459c300a342f45df4bd8d697f2308a435236ecbdc17c02fad53465b432a4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d0518cceaf532e6576923b79953cf44c35d9fc6fcdfd5c6be4755dd029a9cb5"} {"level":"info","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a845459c300a342f45df4bd8d697f2308a435236ecbdc17c02fad53465b432a4"} {"level":"debug","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eed8b5e10ac57185b9fe577b5b384baa90122f55f2e957a87fc4b7a84afa476e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:14:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:14:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eed8b5e10ac57185b9fe577b5b384baa90122f55f2e957a87fc4b7a84afa476e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eed8b5e10ac57185b9fe577b5b384baa90122f55f2e957a87fc4b7a84afa476e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eed8b5e10ac57185b9fe577b5b384baa90122f55f2e957a87fc4b7a84afa476e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eed8b5e10ac57185b9fe577b5b384baa90122f55f2e957a87fc4b7a84afa476e"} {"level":"debug","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eed8b5e10ac57185b9fe577b5b384baa90122f55f2e957a87fc4b7a84afa476e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eed8b5e10ac57185b9fe577b5b384baa90122f55f2e957a87fc4b7a84afa476e"} {"level":"debug","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eed8b5e10ac57185b9fe577b5b384baa90122f55f2e957a87fc4b7a84afa476e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:14:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:14:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eed8b5e10ac57185b9fe577b5b384baa90122f55f2e957a87fc4b7a84afa476e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eed8b5e10ac57185b9fe577b5b384baa90122f55f2e957a87fc4b7a84afa476e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91de55fa05560acee45110c5d06d46fdb9cbed66755b7091063a27d0760f688e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:14:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:14:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91de55fa05560acee45110c5d06d46fdb9cbed66755b7091063a27d0760f688e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eed8b5e10ac57185b9fe577b5b384baa90122f55f2e957a87fc4b7a84afa476e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91de55fa05560acee45110c5d06d46fdb9cbed66755b7091063a27d0760f688e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91de55fa05560acee45110c5d06d46fdb9cbed66755b7091063a27d0760f688e"} {"level":"debug","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91de55fa05560acee45110c5d06d46fdb9cbed66755b7091063a27d0760f688e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:14:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:14:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91de55fa05560acee45110c5d06d46fdb9cbed66755b7091063a27d0760f688e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91de55fa05560acee45110c5d06d46fdb9cbed66755b7091063a27d0760f688e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91de55fa05560acee45110c5d06d46fdb9cbed66755b7091063a27d0760f688e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eed8b5e10ac57185b9fe577b5b384baa90122f55f2e957a87fc4b7a84afa476e"} {"level":"info","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91de55fa05560acee45110c5d06d46fdb9cbed66755b7091063a27d0760f688e"} {"level":"debug","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e1c399ed549c69ee508d0a20bdac264ac7f3313f1dc0c511679a9e34dd9a8c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:14:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:14:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e1c399ed549c69ee508d0a20bdac264ac7f3313f1dc0c511679a9e34dd9a8c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e1c399ed549c69ee508d0a20bdac264ac7f3313f1dc0c511679a9e34dd9a8c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e1c399ed549c69ee508d0a20bdac264ac7f3313f1dc0c511679a9e34dd9a8c3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e1c399ed549c69ee508d0a20bdac264ac7f3313f1dc0c511679a9e34dd9a8c3"} {"level":"debug","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e1c399ed549c69ee508d0a20bdac264ac7f3313f1dc0c511679a9e34dd9a8c3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e1c399ed549c69ee508d0a20bdac264ac7f3313f1dc0c511679a9e34dd9a8c3"} {"level":"debug","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e1c399ed549c69ee508d0a20bdac264ac7f3313f1dc0c511679a9e34dd9a8c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:14:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:14:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e1c399ed549c69ee508d0a20bdac264ac7f3313f1dc0c511679a9e34dd9a8c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e1c399ed549c69ee508d0a20bdac264ac7f3313f1dc0c511679a9e34dd9a8c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e1c399ed549c69ee508d0a20bdac264ac7f3313f1dc0c511679a9e34dd9a8c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"150a47d50c23dc331554891c6795666ecb740f85f75f80928a8e306a8ae89a49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:14:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:14:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"150a47d50c23dc331554891c6795666ecb740f85f75f80928a8e306a8ae89a49","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"150a47d50c23dc331554891c6795666ecb740f85f75f80928a8e306a8ae89a49","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"150a47d50c23dc331554891c6795666ecb740f85f75f80928a8e306a8ae89a49","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e1c399ed549c69ee508d0a20bdac264ac7f3313f1dc0c511679a9e34dd9a8c3"} {"level":"info","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/150a47d50c23dc331554891c6795666ecb740f85f75f80928a8e306a8ae89a49"} {"level":"debug","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"150a47d50c23dc331554891c6795666ecb740f85f75f80928a8e306a8ae89a49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:14:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:14:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["150a47d50c23dc331554891c6795666ecb740f85f75f80928a8e306a8ae89a49"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"150a47d50c23dc331554891c6795666ecb740f85f75f80928a8e306a8ae89a49","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"150a47d50c23dc331554891c6795666ecb740f85f75f80928a8e306a8ae89a49","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/150a47d50c23dc331554891c6795666ecb740f85f75f80928a8e306a8ae89a49"} {"level":"debug","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a133966c4020af4b4ba343a6be1186a53f536d09cc17c23d054cd03f3c85d631","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:14:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:14:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a133966c4020af4b4ba343a6be1186a53f536d09cc17c23d054cd03f3c85d631","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a133966c4020af4b4ba343a6be1186a53f536d09cc17c23d054cd03f3c85d631","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:14:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:14:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a133966c4020af4b4ba343a6be1186a53f536d09cc17c23d054cd03f3c85d631"} {"level":"info","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a133966c4020af4b4ba343a6be1186a53f536d09cc17c23d054cd03f3c85d631","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a133966c4020af4b4ba343a6be1186a53f536d09cc17c23d054cd03f3c85d631","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:14:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:14:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a133966c4020af4b4ba343a6be1186a53f536d09cc17c23d054cd03f3c85d631","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a133966c4020af4b4ba343a6be1186a53f536d09cc17c23d054cd03f3c85d631\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a133966c4020af4b4ba343a6be1186a53f536d09cc17c23d054cd03f3c85d631","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a133966c4020af4b4ba343a6be1186a53f536d09cc17c23d054cd03f3c85d631","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a133966c4020af4b4ba343a6be1186a53f536d09cc17c23d054cd03f3c85d631"} {"level":"info","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a133966c4020af4b4ba343a6be1186a53f536d09cc17c23d054cd03f3c85d631"} {"level":"debug","ts":"2026-07-14T15:14:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c015df19ce54c5bfc8c982d8b6e7e983014e6a8b1968bdb918a7fbcc8350f65f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:14:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:14:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c015df19ce54c5bfc8c982d8b6e7e983014e6a8b1968bdb918a7fbcc8350f65f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c015df19ce54c5bfc8c982d8b6e7e983014e6a8b1968bdb918a7fbcc8350f65f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c015df19ce54c5bfc8c982d8b6e7e983014e6a8b1968bdb918a7fbcc8350f65f"} {"level":"debug","ts":"2026-07-14T15:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c015df19ce54c5bfc8c982d8b6e7e983014e6a8b1968bdb918a7fbcc8350f65f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a133966c4020af4b4ba343a6be1186a53f536d09cc17c23d054cd03f3c85d631","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:14:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:14:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a133966c4020af4b4ba343a6be1186a53f536d09cc17c23d054cd03f3c85d631"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a133966c4020af4b4ba343a6be1186a53f536d09cc17c23d054cd03f3c85d631","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a133966c4020af4b4ba343a6be1186a53f536d09cc17c23d054cd03f3c85d631","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c015df19ce54c5bfc8c982d8b6e7e983014e6a8b1968bdb918a7fbcc8350f65f"} {"level":"debug","ts":"2026-07-14T15:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c015df19ce54c5bfc8c982d8b6e7e983014e6a8b1968bdb918a7fbcc8350f65f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:14:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:14:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c015df19ce54c5bfc8c982d8b6e7e983014e6a8b1968bdb918a7fbcc8350f65f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c015df19ce54c5bfc8c982d8b6e7e983014e6a8b1968bdb918a7fbcc8350f65f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c015df19ce54c5bfc8c982d8b6e7e983014e6a8b1968bdb918a7fbcc8350f65f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a133966c4020af4b4ba343a6be1186a53f536d09cc17c23d054cd03f3c85d631"} {"level":"info","ts":"2026-07-14T15:14:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c015df19ce54c5bfc8c982d8b6e7e983014e6a8b1968bdb918a7fbcc8350f65f"} {"level":"debug","ts":"2026-07-14T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c015df19ce54c5bfc8c982d8b6e7e983014e6a8b1968bdb918a7fbcc8350f65f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:14:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:14:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c015df19ce54c5bfc8c982d8b6e7e983014e6a8b1968bdb918a7fbcc8350f65f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c015df19ce54c5bfc8c982d8b6e7e983014e6a8b1968bdb918a7fbcc8350f65f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c015df19ce54c5bfc8c982d8b6e7e983014e6a8b1968bdb918a7fbcc8350f65f"} {"level":"debug","ts":"2026-07-14T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c015df19ce54c5bfc8c982d8b6e7e983014e6a8b1968bdb918a7fbcc8350f65f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c015df19ce54c5bfc8c982d8b6e7e983014e6a8b1968bdb918a7fbcc8350f65f"} {"level":"debug","ts":"2026-07-14T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c015df19ce54c5bfc8c982d8b6e7e983014e6a8b1968bdb918a7fbcc8350f65f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:14:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:14:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c015df19ce54c5bfc8c982d8b6e7e983014e6a8b1968bdb918a7fbcc8350f65f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c015df19ce54c5bfc8c982d8b6e7e983014e6a8b1968bdb918a7fbcc8350f65f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c015df19ce54c5bfc8c982d8b6e7e983014e6a8b1968bdb918a7fbcc8350f65f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:14:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:14:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c015df19ce54c5bfc8c982d8b6e7e983014e6a8b1968bdb918a7fbcc8350f65f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c015df19ce54c5bfc8c982d8b6e7e983014e6a8b1968bdb918a7fbcc8350f65f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c015df19ce54c5bfc8c982d8b6e7e983014e6a8b1968bdb918a7fbcc8350f65f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c015df19ce54c5bfc8c982d8b6e7e983014e6a8b1968bdb918a7fbcc8350f65f"} {"level":"debug","ts":"2026-07-14T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c015df19ce54c5bfc8c982d8b6e7e983014e6a8b1968bdb918a7fbcc8350f65f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c015df19ce54c5bfc8c982d8b6e7e983014e6a8b1968bdb918a7fbcc8350f65f"} {"level":"debug","ts":"2026-07-14T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c015df19ce54c5bfc8c982d8b6e7e983014e6a8b1968bdb918a7fbcc8350f65f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:14:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:14:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c015df19ce54c5bfc8c982d8b6e7e983014e6a8b1968bdb918a7fbcc8350f65f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c015df19ce54c5bfc8c982d8b6e7e983014e6a8b1968bdb918a7fbcc8350f65f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c015df19ce54c5bfc8c982d8b6e7e983014e6a8b1968bdb918a7fbcc8350f65f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:14:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:14:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c015df19ce54c5bfc8c982d8b6e7e983014e6a8b1968bdb918a7fbcc8350f65f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c015df19ce54c5bfc8c982d8b6e7e983014e6a8b1968bdb918a7fbcc8350f65f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c015df19ce54c5bfc8c982d8b6e7e983014e6a8b1968bdb918a7fbcc8350f65f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:14:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c015df19ce54c5bfc8c982d8b6e7e983014e6a8b1968bdb918a7fbcc8350f65f"} {"level":"debug","ts":"2026-07-14T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c015df19ce54c5bfc8c982d8b6e7e983014e6a8b1968bdb918a7fbcc8350f65f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c015df19ce54c5bfc8c982d8b6e7e983014e6a8b1968bdb918a7fbcc8350f65f"} {"level":"debug","ts":"2026-07-14T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c015df19ce54c5bfc8c982d8b6e7e983014e6a8b1968bdb918a7fbcc8350f65f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:14:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:14:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c015df19ce54c5bfc8c982d8b6e7e983014e6a8b1968bdb918a7fbcc8350f65f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c015df19ce54c5bfc8c982d8b6e7e983014e6a8b1968bdb918a7fbcc8350f65f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c015df19ce54c5bfc8c982d8b6e7e983014e6a8b1968bdb918a7fbcc8350f65f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c015df19ce54c5bfc8c982d8b6e7e983014e6a8b1968bdb918a7fbcc8350f65f"} {"level":"debug","ts":"2026-07-14T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ad3d2963286dfc8bb82452471e5fb70b183e3b27645dfc66d8353a5b2fe03bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:14:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:14:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ad3d2963286dfc8bb82452471e5fb70b183e3b27645dfc66d8353a5b2fe03bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ad3d2963286dfc8bb82452471e5fb70b183e3b27645dfc66d8353a5b2fe03bc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ad3d2963286dfc8bb82452471e5fb70b183e3b27645dfc66d8353a5b2fe03bc"} {"level":"debug","ts":"2026-07-14T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ad3d2963286dfc8bb82452471e5fb70b183e3b27645dfc66d8353a5b2fe03bc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ad3d2963286dfc8bb82452471e5fb70b183e3b27645dfc66d8353a5b2fe03bc"} {"level":"debug","ts":"2026-07-14T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ad3d2963286dfc8bb82452471e5fb70b183e3b27645dfc66d8353a5b2fe03bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:14:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:14:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ad3d2963286dfc8bb82452471e5fb70b183e3b27645dfc66d8353a5b2fe03bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ad3d2963286dfc8bb82452471e5fb70b183e3b27645dfc66d8353a5b2fe03bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ad3d2963286dfc8bb82452471e5fb70b183e3b27645dfc66d8353a5b2fe03bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:14:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:14:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ad3d2963286dfc8bb82452471e5fb70b183e3b27645dfc66d8353a5b2fe03bc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ad3d2963286dfc8bb82452471e5fb70b183e3b27645dfc66d8353a5b2fe03bc"} {"level":"debug","ts":"2026-07-14T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ad3d2963286dfc8bb82452471e5fb70b183e3b27645dfc66d8353a5b2fe03bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:14:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:14:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ad3d2963286dfc8bb82452471e5fb70b183e3b27645dfc66d8353a5b2fe03bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ad3d2963286dfc8bb82452471e5fb70b183e3b27645dfc66d8353a5b2fe03bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ad3d2963286dfc8bb82452471e5fb70b183e3b27645dfc66d8353a5b2fe03bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ad3d2963286dfc8bb82452471e5fb70b183e3b27645dfc66d8353a5b2fe03bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:14:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:14:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ad3d2963286dfc8bb82452471e5fb70b183e3b27645dfc66d8353a5b2fe03bc"} {"level":"info","ts":"2026-07-14T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ad3d2963286dfc8bb82452471e5fb70b183e3b27645dfc66d8353a5b2fe03bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ad3d2963286dfc8bb82452471e5fb70b183e3b27645dfc66d8353a5b2fe03bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:14:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:14:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ad3d2963286dfc8bb82452471e5fb70b183e3b27645dfc66d8353a5b2fe03bc"} {"level":"error","ts":"2026-07-14T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9ad3d2963286dfc8bb82452471e5fb70b183e3b27645dfc66d8353a5b2fe03bc","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9ad3d2963286dfc8bb82452471e5fb70b183e3b27645dfc66d8353a5b2fe03bc\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ad3d2963286dfc8bb82452471e5fb70b183e3b27645dfc66d8353a5b2fe03bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ad3d2963286dfc8bb82452471e5fb70b183e3b27645dfc66d8353a5b2fe03bc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ad3d2963286dfc8bb82452471e5fb70b183e3b27645dfc66d8353a5b2fe03bc"} {"level":"debug","ts":"2026-07-14T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ad3d2963286dfc8bb82452471e5fb70b183e3b27645dfc66d8353a5b2fe03bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:14:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:14:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ad3d2963286dfc8bb82452471e5fb70b183e3b27645dfc66d8353a5b2fe03bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ad3d2963286dfc8bb82452471e5fb70b183e3b27645dfc66d8353a5b2fe03bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ad3d2963286dfc8bb82452471e5fb70b183e3b27645dfc66d8353a5b2fe03bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:14:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:14:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ad3d2963286dfc8bb82452471e5fb70b183e3b27645dfc66d8353a5b2fe03bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ad3d2963286dfc8bb82452471e5fb70b183e3b27645dfc66d8353a5b2fe03bc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ad3d2963286dfc8bb82452471e5fb70b183e3b27645dfc66d8353a5b2fe03bc"} {"level":"debug","ts":"2026-07-14T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ad3d2963286dfc8bb82452471e5fb70b183e3b27645dfc66d8353a5b2fe03bc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ad3d2963286dfc8bb82452471e5fb70b183e3b27645dfc66d8353a5b2fe03bc"} {"level":"debug","ts":"2026-07-14T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ad3d2963286dfc8bb82452471e5fb70b183e3b27645dfc66d8353a5b2fe03bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:14:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:14:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ad3d2963286dfc8bb82452471e5fb70b183e3b27645dfc66d8353a5b2fe03bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ad3d2963286dfc8bb82452471e5fb70b183e3b27645dfc66d8353a5b2fe03bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ad3d2963286dfc8bb82452471e5fb70b183e3b27645dfc66d8353a5b2fe03bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:14:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:14:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ad3d2963286dfc8bb82452471e5fb70b183e3b27645dfc66d8353a5b2fe03bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ad3d2963286dfc8bb82452471e5fb70b183e3b27645dfc66d8353a5b2fe03bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ad3d2963286dfc8bb82452471e5fb70b183e3b27645dfc66d8353a5b2fe03bc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ad3d2963286dfc8bb82452471e5fb70b183e3b27645dfc66d8353a5b2fe03bc"} {"level":"debug","ts":"2026-07-14T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e1c399ed549c69ee508d0a20bdac264ac7f3313f1dc0c511679a9e34dd9a8c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ad3d2963286dfc8bb82452471e5fb70b183e3b27645dfc66d8353a5b2fe03bc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ad3d2963286dfc8bb82452471e5fb70b183e3b27645dfc66d8353a5b2fe03bc"} {"level":"info","ts":"2026-07-14T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e1c399ed549c69ee508d0a20bdac264ac7f3313f1dc0c511679a9e34dd9a8c3"} {"level":"debug","ts":"2026-07-14T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ad3d2963286dfc8bb82452471e5fb70b183e3b27645dfc66d8353a5b2fe03bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:14:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:14:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ad3d2963286dfc8bb82452471e5fb70b183e3b27645dfc66d8353a5b2fe03bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ad3d2963286dfc8bb82452471e5fb70b183e3b27645dfc66d8353a5b2fe03bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ad3d2963286dfc8bb82452471e5fb70b183e3b27645dfc66d8353a5b2fe03bc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ad3d2963286dfc8bb82452471e5fb70b183e3b27645dfc66d8353a5b2fe03bc"} {"level":"debug","ts":"2026-07-14T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f84304e9bfef82d412262ec2265e7059d79629f6dc867ae33ed959ca023eed45","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f84304e9bfef82d412262ec2265e7059d79629f6dc867ae33ed959ca023eed45"} {"level":"debug","ts":"2026-07-14T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54c73acb141217a0bf6354452bb50072e5bfee74a08ef994eccb025f9b4f0b6a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54c73acb141217a0bf6354452bb50072e5bfee74a08ef994eccb025f9b4f0b6a"} {"level":"debug","ts":"2026-07-14T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91de55fa05560acee45110c5d06d46fdb9cbed66755b7091063a27d0760f688e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:14:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:14:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91de55fa05560acee45110c5d06d46fdb9cbed66755b7091063a27d0760f688e"} {"level":"info","ts":"2026-07-14T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91de55fa05560acee45110c5d06d46fdb9cbed66755b7091063a27d0760f688e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91de55fa05560acee45110c5d06d46fdb9cbed66755b7091063a27d0760f688e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91de55fa05560acee45110c5d06d46fdb9cbed66755b7091063a27d0760f688e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91de55fa05560acee45110c5d06d46fdb9cbed66755b7091063a27d0760f688e"} {"level":"debug","ts":"2026-07-14T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91de55fa05560acee45110c5d06d46fdb9cbed66755b7091063a27d0760f688e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:14:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:14:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91de55fa05560acee45110c5d06d46fdb9cbed66755b7091063a27d0760f688e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91de55fa05560acee45110c5d06d46fdb9cbed66755b7091063a27d0760f688e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91de55fa05560acee45110c5d06d46fdb9cbed66755b7091063a27d0760f688e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:14:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:14:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91de55fa05560acee45110c5d06d46fdb9cbed66755b7091063a27d0760f688e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91de55fa05560acee45110c5d06d46fdb9cbed66755b7091063a27d0760f688e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91de55fa05560acee45110c5d06d46fdb9cbed66755b7091063a27d0760f688e"} {"level":"debug","ts":"2026-07-14T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91de55fa05560acee45110c5d06d46fdb9cbed66755b7091063a27d0760f688e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d0518cceaf532e6576923b79953cf44c35d9fc6fcdfd5c6be4755dd029a9cb5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91de55fa05560acee45110c5d06d46fdb9cbed66755b7091063a27d0760f688e"} {"level":"debug","ts":"2026-07-14T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91de55fa05560acee45110c5d06d46fdb9cbed66755b7091063a27d0760f688e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:14:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:14:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91de55fa05560acee45110c5d06d46fdb9cbed66755b7091063a27d0760f688e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91de55fa05560acee45110c5d06d46fdb9cbed66755b7091063a27d0760f688e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91de55fa05560acee45110c5d06d46fdb9cbed66755b7091063a27d0760f688e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d0518cceaf532e6576923b79953cf44c35d9fc6fcdfd5c6be4755dd029a9cb5"} {"level":"debug","ts":"2026-07-14T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"805d8a63f690215c3b91f5755340020a8f04487b5293e5c121396ef8eefb6521","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91de55fa05560acee45110c5d06d46fdb9cbed66755b7091063a27d0760f688e"} {"level":"info","ts":"2026-07-14T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/805d8a63f690215c3b91f5755340020a8f04487b5293e5c121396ef8eefb6521"} {"level":"debug","ts":"2026-07-14T15:14:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1c9d5b05f94d0f58cd7caaeb0e508cfa4eb11658645a419874be64ec37c4310","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4175e5b0fc452c7df42409b66698993493921e694c0c77843db56dbb72f576f8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1c9d5b05f94d0f58cd7caaeb0e508cfa4eb11658645a419874be64ec37c4310"} {"level":"info","ts":"2026-07-14T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4175e5b0fc452c7df42409b66698993493921e694c0c77843db56dbb72f576f8"} {"level":"debug","ts":"2026-07-14T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a133966c4020af4b4ba343a6be1186a53f536d09cc17c23d054cd03f3c85d631","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a845459c300a342f45df4bd8d697f2308a435236ecbdc17c02fad53465b432a4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a133966c4020af4b4ba343a6be1186a53f536d09cc17c23d054cd03f3c85d631"} {"level":"debug","ts":"2026-07-14T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9be56ef9615814dd12949bbc1478e24d2baae5b17c6f6b240b1cbb3d87bbf3c7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a845459c300a342f45df4bd8d697f2308a435236ecbdc17c02fad53465b432a4"} {"level":"info","ts":"2026-07-14T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9be56ef9615814dd12949bbc1478e24d2baae5b17c6f6b240b1cbb3d87bbf3c7"} {"level":"debug","ts":"2026-07-14T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eed8b5e10ac57185b9fe577b5b384baa90122f55f2e957a87fc4b7a84afa476e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eed8b5e10ac57185b9fe577b5b384baa90122f55f2e957a87fc4b7a84afa476e"} {"level":"debug","ts":"2026-07-14T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f576862da9f1396985c4d9d2daed352f6b839705ad896cc942540400fb93e3d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f576862da9f1396985c4d9d2daed352f6b839705ad896cc942540400fb93e3d"} {"level":"debug","ts":"2026-07-14T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d22bb89d77cf81926d68870abc88ebd231bfbbb265c959a739544054bcd44b3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:14:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:14:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d22bb89d77cf81926d68870abc88ebd231bfbbb265c959a739544054bcd44b3f"} {"level":"info","ts":"2026-07-14T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d22bb89d77cf81926d68870abc88ebd231bfbbb265c959a739544054bcd44b3f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28aa1448daedcbf487763a3ecb505848171ea0c754cc36b45478825e587d91ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T15:14:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T15:14:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28aa1448daedcbf487763a3ecb505848171ea0c754cc36b45478825e587d91ba"} {"level":"info","ts":"2026-07-14T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d22bb89d77cf81926d68870abc88ebd231bfbbb265c959a739544054bcd44b3f"} {"level":"info","ts":"2026-07-14T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28aa1448daedcbf487763a3ecb505848171ea0c754cc36b45478825e587d91ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d22bb89d77cf81926d68870abc88ebd231bfbbb265c959a739544054bcd44b3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:14:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:14:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d22bb89d77cf81926d68870abc88ebd231bfbbb265c959a739544054bcd44b3f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375"} {"level":"info","ts":"2026-07-14T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d22bb89d77cf81926d68870abc88ebd231bfbbb265c959a739544054bcd44b3f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28aa1448daedcbf487763a3ecb505848171ea0c754cc36b45478825e587d91ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d22bb89d77cf81926d68870abc88ebd231bfbbb265c959a739544054bcd44b3f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28aa1448daedcbf487763a3ecb505848171ea0c754cc36b45478825e587d91ba"} {"level":"debug","ts":"2026-07-14T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28aa1448daedcbf487763a3ecb505848171ea0c754cc36b45478825e587d91ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T15:14:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T15:14:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28aa1448daedcbf487763a3ecb505848171ea0c754cc36b45478825e587d91ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d22bb89d77cf81926d68870abc88ebd231bfbbb265c959a739544054bcd44b3f"} {"level":"info","ts":"2026-07-14T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28aa1448daedcbf487763a3ecb505848171ea0c754cc36b45478825e587d91ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"150a47d50c23dc331554891c6795666ecb740f85f75f80928a8e306a8ae89a49","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28aa1448daedcbf487763a3ecb505848171ea0c754cc36b45478825e587d91ba","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce"} {"level":"debug","ts":"2026-07-14T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"604061bd58f8ea487ef30b6275a5670c166e9a232b6f7287a0da92793239fb2e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/150a47d50c23dc331554891c6795666ecb740f85f75f80928a8e306a8ae89a49"} {"level":"debug","ts":"2026-07-14T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f4a1703447958cab3315055ee7e5a173e8aebd3d60d1917ee4b9e85fe668064","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28aa1448daedcbf487763a3ecb505848171ea0c754cc36b45478825e587d91ba"} {"level":"debug","ts":"2026-07-14T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6be90af30f03e34aecafc74c8eaf3895a372be54be7938c6e8704761f8f84d0d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/604061bd58f8ea487ef30b6275a5670c166e9a232b6f7287a0da92793239fb2e"} {"level":"debug","ts":"2026-07-14T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c869ed378b6eee38de6e0dc2b1bab7f0abdb1f511f03c708da07d5124d80181f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f4a1703447958cab3315055ee7e5a173e8aebd3d60d1917ee4b9e85fe668064"} {"level":"info","ts":"2026-07-14T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6be90af30f03e34aecafc74c8eaf3895a372be54be7938c6e8704761f8f84d0d"} {"level":"info","ts":"2026-07-14T15:14:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c869ed378b6eee38de6e0dc2b1bab7f0abdb1f511f03c708da07d5124d80181f"} {"level":"info","ts":"2026-07-14T15:14:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"38b2bf24-5998-402d-954b-1ab105d02095","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:44110","PortSpecifier":{"PortValue":44110}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"38b2bf24-5998-402d-954b-1ab105d02095","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ebb1a4.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T15:14:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"38b2bf24-5998-402d-954b-1ab105d02095","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:44110","PortSpecifier":{"PortValue":44110}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784042059,"nanos":428083108},"http":{"id":"38b2bf24-5998-402d-954b-1ab105d02095","method":"POST","headers":{":authority":"e2e-shared-a-ebb1a4.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T15:14:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"38b2bf24-5998-402d-954b-1ab105d02095","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T15:14:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"38b2bf24-5998-402d-954b-1ab105d02095","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c34cfb71-3058-4b32-8f33-e0d6d7dad951","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a225cdb-1660-4d55-bdaf-f564f742244d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f6461cc0c70f"]}} {"level":"debug","ts":"2026-07-14T15:14:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"38b2bf24-5998-402d-954b-1ab105d02095","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f6461cc0c70f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a225cdb-1660-4d55-bdaf-f564f742244d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c34cfb71-3058-4b32-8f33-e0d6d7dad951","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c869ed378b6eee38de6e0dc2b1bab7f0abdb1f511f03c708da07d5124d80181f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ebb1a4.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T15:14:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"38b2bf24-5998-402d-954b-1ab105d02095","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:14:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"38b2bf24-5998-402d-954b-1ab105d02095","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:14:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"38b2bf24-5998-402d-954b-1ab105d02095","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ebb1a4/rate-test-model-ebb1a4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ebb1a4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:14:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"38b2bf24-5998-402d-954b-1ab105d02095","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T15:14:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"38b2bf24-5998-402d-954b-1ab105d02095","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T15:14:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"38b2bf24-5998-402d-954b-1ab105d02095","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T15:14:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"38b2bf24-5998-402d-954b-1ab105d02095","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T15:14:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"38b2bf24-5998-402d-954b-1ab105d02095","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T15:14:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4d4ddefb-7efc-4fda-a7b0-e25de1239300","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:33910","PortSpecifier":{"PortValue":33910}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4d4ddefb-7efc-4fda-a7b0-e25de1239300","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-747ac7.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T15:14:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4d4ddefb-7efc-4fda-a7b0-e25de1239300","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:33910","PortSpecifier":{"PortValue":33910}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784042059,"nanos":474699254},"http":{"id":"4d4ddefb-7efc-4fda-a7b0-e25de1239300","method":"POST","headers":{":authority":"e2e-shared-b-747ac7.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T15:14:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4d4ddefb-7efc-4fda-a7b0-e25de1239300","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T15:14:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4d4ddefb-7efc-4fda-a7b0-e25de1239300","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c34cfb71-3058-4b32-8f33-e0d6d7dad951","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a225cdb-1660-4d55-bdaf-f564f742244d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f6461cc0c70f"]}} {"level":"debug","ts":"2026-07-14T15:14:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4d4ddefb-7efc-4fda-a7b0-e25de1239300","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f6461cc0c70f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a225cdb-1660-4d55-bdaf-f564f742244d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c34cfb71-3058-4b32-8f33-e0d6d7dad951","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4f4a1703447958cab3315055ee7e5a173e8aebd3d60d1917ee4b9e85fe668064"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-747ac7.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T15:14:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4d4ddefb-7efc-4fda-a7b0-e25de1239300","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:14:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4d4ddefb-7efc-4fda-a7b0-e25de1239300","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:14:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4d4ddefb-7efc-4fda-a7b0-e25de1239300","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-747ac7/rate-test-model-747ac7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-747ac7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:14:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4d4ddefb-7efc-4fda-a7b0-e25de1239300","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T15:14:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4d4ddefb-7efc-4fda-a7b0-e25de1239300","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T15:14:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4d4ddefb-7efc-4fda-a7b0-e25de1239300","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T15:14:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4d4ddefb-7efc-4fda-a7b0-e25de1239300","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T15:14:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4d4ddefb-7efc-4fda-a7b0-e25de1239300","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T15:14:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"76756220-aa89-4729-8060-d5a07907c1f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:44120","PortSpecifier":{"PortValue":44120}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"76756220-aa89-4729-8060-d5a07907c1f8","method":"POST","path":"/ai-tenant-e2e-shared-a-ebb1a4/rate-test-model-ebb1a4/v1/completions","host":"e2e-shared-a-ebb1a4.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T15:14:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"76756220-aa89-4729-8060-d5a07907c1f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:44120","PortSpecifier":{"PortValue":44120}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784042059,"nanos":522146088},"http":{"id":"76756220-aa89-4729-8060-d5a07907c1f8","method":"POST","headers":{":authority":"e2e-shared-a-ebb1a4.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ebb1a4/rate-test-model-ebb1a4/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T15:14:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"76756220-aa89-4729-8060-d5a07907c1f8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1D4Y9zLS4YZzsohOV_B5pzhqqoHBXyfhXgwazIB6VbFICOkvP4RNctC2y4Hk7"} {"level":"debug","ts":"2026-07-14T15:14:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"76756220-aa89-4729-8060-d5a07907c1f8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ebb1a4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1D4Y9zLS4YZzsohOV_B5pzhqqoHBXyfhXgwazIB6VbFICOkvP4RNctC2y4Hk7\"}"} {"level":"debug","ts":"2026-07-14T15:14:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"76756220-aa89-4729-8060-d5a07907c1f8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ebb1a4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7c43f5b1-0381-49ce-8311-211b1e1e84d5","keyName":"e2e-rate-a-0be275","subscription":"e2e-rate-iso-a-0be275","tenant":"e2e-shared-a-ebb1a4","userId":"7c43f5b1-0381-49ce-8311-211b1e1e84d5","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T15:14:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"76756220-aa89-4729-8060-d5a07907c1f8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ebb1a4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ebb1a4/rate-test-model-ebb1a4\",\"requestedSubscription\":\"e2e-rate-iso-a-0be275\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T15:14:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"76756220-aa89-4729-8060-d5a07907c1f8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ebb1a4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ebb1a4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0be275","namespace":"ai-tenant-e2e-shared-a-ebb1a4","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T15:14:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"76756220-aa89-4729-8060-d5a07907c1f8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T15:14:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76756220-aa89-4729-8060-d5a07907c1f8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:14:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76756220-aa89-4729-8060-d5a07907c1f8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:14:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76756220-aa89-4729-8060-d5a07907c1f8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ebb1a4/rate-test-model-ebb1a4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ebb1a4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:14:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76756220-aa89-4729-8060-d5a07907c1f8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:14:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"76756220-aa89-4729-8060-d5a07907c1f8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T15:14:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"76756220-aa89-4729-8060-d5a07907c1f8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-0be275"} {"level":"debug","ts":"2026-07-14T15:14:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"76756220-aa89-4729-8060-d5a07907c1f8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T15:14:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"76756220-aa89-4729-8060-d5a07907c1f8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7c43f5b1-0381-49ce-8311-211b1e1e84d5","keyName":"e2e-rate-a-0be275","selected_subscription":"e2e-rate-iso-a-0be275","selected_subscription_key":"ai-tenant-e2e-shared-a-ebb1a4/e2e-rate-iso-a-0be275@ai-tenant-e2e-shared-a-ebb1a4/rate-test-model-ebb1a4","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ebb1a4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0be275","namespace":"ai-tenant-e2e-shared-a-ebb1a4","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T15:14:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"76756220-aa89-4729-8060-d5a07907c1f8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T15:14:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"76756220-aa89-4729-8060-d5a07907c1f8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T15:14:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4b7139a6-7a08-46fb-b41f-1da2cdc744fc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:35544","PortSpecifier":{"PortValue":35544}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4b7139a6-7a08-46fb-b41f-1da2cdc744fc","method":"POST","path":"/ai-tenant-e2e-shared-a-ebb1a4/rate-test-model-ebb1a4/v1/completions","host":"e2e-shared-a-ebb1a4.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T15:14:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4b7139a6-7a08-46fb-b41f-1da2cdc744fc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:35544","PortSpecifier":{"PortValue":35544}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784042060,"nanos":577675471},"http":{"id":"4b7139a6-7a08-46fb-b41f-1da2cdc744fc","method":"POST","headers":{":authority":"e2e-shared-a-ebb1a4.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ebb1a4/rate-test-model-ebb1a4/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T15:14:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4b7139a6-7a08-46fb-b41f-1da2cdc744fc","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1D4Y9zLS4YZzsohOV_B5pzhqqoHBXyfhXgwazIB6VbFICOkvP4RNctC2y4Hk7"} {"level":"debug","ts":"2026-07-14T15:14:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4b7139a6-7a08-46fb-b41f-1da2cdc744fc","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ebb1a4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1D4Y9zLS4YZzsohOV_B5pzhqqoHBXyfhXgwazIB6VbFICOkvP4RNctC2y4Hk7\"}"} {"level":"debug","ts":"2026-07-14T15:14:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4b7139a6-7a08-46fb-b41f-1da2cdc744fc","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ebb1a4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7c43f5b1-0381-49ce-8311-211b1e1e84d5","keyName":"e2e-rate-a-0be275","subscription":"e2e-rate-iso-a-0be275","tenant":"e2e-shared-a-ebb1a4","userId":"7c43f5b1-0381-49ce-8311-211b1e1e84d5","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T15:14:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4b7139a6-7a08-46fb-b41f-1da2cdc744fc","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ebb1a4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ebb1a4/rate-test-model-ebb1a4\",\"requestedSubscription\":\"e2e-rate-iso-a-0be275\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T15:14:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4b7139a6-7a08-46fb-b41f-1da2cdc744fc","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ebb1a4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ebb1a4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0be275","namespace":"ai-tenant-e2e-shared-a-ebb1a4","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T15:14:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4b7139a6-7a08-46fb-b41f-1da2cdc744fc","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T15:14:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b7139a6-7a08-46fb-b41f-1da2cdc744fc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:14:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b7139a6-7a08-46fb-b41f-1da2cdc744fc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:14:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b7139a6-7a08-46fb-b41f-1da2cdc744fc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ebb1a4/rate-test-model-ebb1a4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ebb1a4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:14:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b7139a6-7a08-46fb-b41f-1da2cdc744fc","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:14:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4b7139a6-7a08-46fb-b41f-1da2cdc744fc","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T15:14:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4b7139a6-7a08-46fb-b41f-1da2cdc744fc","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T15:14:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4b7139a6-7a08-46fb-b41f-1da2cdc744fc","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-0be275"} {"level":"debug","ts":"2026-07-14T15:14:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4b7139a6-7a08-46fb-b41f-1da2cdc744fc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7c43f5b1-0381-49ce-8311-211b1e1e84d5","keyName":"e2e-rate-a-0be275","selected_subscription":"e2e-rate-iso-a-0be275","selected_subscription_key":"ai-tenant-e2e-shared-a-ebb1a4/e2e-rate-iso-a-0be275@ai-tenant-e2e-shared-a-ebb1a4/rate-test-model-ebb1a4","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ebb1a4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0be275","namespace":"ai-tenant-e2e-shared-a-ebb1a4","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T15:14:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4b7139a6-7a08-46fb-b41f-1da2cdc744fc","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T15:14:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4b7139a6-7a08-46fb-b41f-1da2cdc744fc","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T15:14:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bc07940b-b00c-425a-9063-27f3ed2e45e9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:35548","PortSpecifier":{"PortValue":35548}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bc07940b-b00c-425a-9063-27f3ed2e45e9","method":"POST","path":"/ai-tenant-e2e-shared-a-ebb1a4/rate-test-model-ebb1a4/v1/completions","host":"e2e-shared-a-ebb1a4.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T15:14:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bc07940b-b00c-425a-9063-27f3ed2e45e9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:35548","PortSpecifier":{"PortValue":35548}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784042061,"nanos":621342192},"http":{"id":"bc07940b-b00c-425a-9063-27f3ed2e45e9","method":"POST","headers":{":authority":"e2e-shared-a-ebb1a4.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ebb1a4/rate-test-model-ebb1a4/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T15:14:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bc07940b-b00c-425a-9063-27f3ed2e45e9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1D4Y9zLS4YZzsohOV_B5pzhqqoHBXyfhXgwazIB6VbFICOkvP4RNctC2y4Hk7"} {"level":"debug","ts":"2026-07-14T15:14:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bc07940b-b00c-425a-9063-27f3ed2e45e9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ebb1a4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1D4Y9zLS4YZzsohOV_B5pzhqqoHBXyfhXgwazIB6VbFICOkvP4RNctC2y4Hk7\"}"} {"level":"debug","ts":"2026-07-14T15:14:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bc07940b-b00c-425a-9063-27f3ed2e45e9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ebb1a4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7c43f5b1-0381-49ce-8311-211b1e1e84d5","keyName":"e2e-rate-a-0be275","subscription":"e2e-rate-iso-a-0be275","tenant":"e2e-shared-a-ebb1a4","userId":"7c43f5b1-0381-49ce-8311-211b1e1e84d5","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T15:14:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bc07940b-b00c-425a-9063-27f3ed2e45e9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ebb1a4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ebb1a4/rate-test-model-ebb1a4\",\"requestedSubscription\":\"e2e-rate-iso-a-0be275\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T15:14:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bc07940b-b00c-425a-9063-27f3ed2e45e9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ebb1a4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ebb1a4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0be275","namespace":"ai-tenant-e2e-shared-a-ebb1a4","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T15:14:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bc07940b-b00c-425a-9063-27f3ed2e45e9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T15:14:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc07940b-b00c-425a-9063-27f3ed2e45e9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:14:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc07940b-b00c-425a-9063-27f3ed2e45e9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:14:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc07940b-b00c-425a-9063-27f3ed2e45e9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:14:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc07940b-b00c-425a-9063-27f3ed2e45e9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ebb1a4/rate-test-model-ebb1a4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ebb1a4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:14:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bc07940b-b00c-425a-9063-27f3ed2e45e9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-0be275"} {"level":"debug","ts":"2026-07-14T15:14:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bc07940b-b00c-425a-9063-27f3ed2e45e9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T15:14:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bc07940b-b00c-425a-9063-27f3ed2e45e9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T15:14:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bc07940b-b00c-425a-9063-27f3ed2e45e9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7c43f5b1-0381-49ce-8311-211b1e1e84d5","keyName":"e2e-rate-a-0be275","selected_subscription":"e2e-rate-iso-a-0be275","selected_subscription_key":"ai-tenant-e2e-shared-a-ebb1a4/e2e-rate-iso-a-0be275@ai-tenant-e2e-shared-a-ebb1a4/rate-test-model-ebb1a4","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ebb1a4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0be275","namespace":"ai-tenant-e2e-shared-a-ebb1a4","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T15:14:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bc07940b-b00c-425a-9063-27f3ed2e45e9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T15:14:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bc07940b-b00c-425a-9063-27f3ed2e45e9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T15:14:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0732484b-31d3-457d-8ffc-10bf99c82ced","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:53416","PortSpecifier":{"PortValue":53416}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0732484b-31d3-457d-8ffc-10bf99c82ced","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ebb1a4.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T15:14:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0732484b-31d3-457d-8ffc-10bf99c82ced","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:53416","PortSpecifier":{"PortValue":53416}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784042074,"nanos":860365774},"http":{"id":"0732484b-31d3-457d-8ffc-10bf99c82ced","method":"POST","headers":{":authority":"e2e-shared-a-ebb1a4.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T15:14:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0732484b-31d3-457d-8ffc-10bf99c82ced","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T15:14:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0732484b-31d3-457d-8ffc-10bf99c82ced","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c34cfb71-3058-4b32-8f33-e0d6d7dad951","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a225cdb-1660-4d55-bdaf-f564f742244d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f6461cc0c70f"]}} {"level":"debug","ts":"2026-07-14T15:14:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0732484b-31d3-457d-8ffc-10bf99c82ced","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f6461cc0c70f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a225cdb-1660-4d55-bdaf-f564f742244d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c34cfb71-3058-4b32-8f33-e0d6d7dad951","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c869ed378b6eee38de6e0dc2b1bab7f0abdb1f511f03c708da07d5124d80181f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ebb1a4.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T15:14:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0732484b-31d3-457d-8ffc-10bf99c82ced","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:14:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0732484b-31d3-457d-8ffc-10bf99c82ced","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:14:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0732484b-31d3-457d-8ffc-10bf99c82ced","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ebb1a4/rate-test-model-ebb1a4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ebb1a4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:14:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0732484b-31d3-457d-8ffc-10bf99c82ced","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T15:14:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0732484b-31d3-457d-8ffc-10bf99c82ced","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T15:14:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0732484b-31d3-457d-8ffc-10bf99c82ced","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T15:14:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0732484b-31d3-457d-8ffc-10bf99c82ced","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T15:14:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0732484b-31d3-457d-8ffc-10bf99c82ced","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T15:14:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6373d501-eed0-4726-9e3f-723cd53c4d05","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:60700","PortSpecifier":{"PortValue":60700}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6373d501-eed0-4726-9e3f-723cd53c4d05","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-747ac7.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T15:14:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6373d501-eed0-4726-9e3f-723cd53c4d05","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:60700","PortSpecifier":{"PortValue":60700}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784042074,"nanos":899282399},"http":{"id":"6373d501-eed0-4726-9e3f-723cd53c4d05","method":"POST","headers":{":authority":"e2e-shared-b-747ac7.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T15:14:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6373d501-eed0-4726-9e3f-723cd53c4d05","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T15:14:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6373d501-eed0-4726-9e3f-723cd53c4d05","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c34cfb71-3058-4b32-8f33-e0d6d7dad951","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a225cdb-1660-4d55-bdaf-f564f742244d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f6461cc0c70f"]}} {"level":"debug","ts":"2026-07-14T15:14:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6373d501-eed0-4726-9e3f-723cd53c4d05","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f6461cc0c70f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a225cdb-1660-4d55-bdaf-f564f742244d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c34cfb71-3058-4b32-8f33-e0d6d7dad951","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4f4a1703447958cab3315055ee7e5a173e8aebd3d60d1917ee4b9e85fe668064"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-747ac7.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T15:14:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6373d501-eed0-4726-9e3f-723cd53c4d05","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:14:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6373d501-eed0-4726-9e3f-723cd53c4d05","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:14:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6373d501-eed0-4726-9e3f-723cd53c4d05","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-747ac7/rate-test-model-747ac7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-747ac7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:14:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6373d501-eed0-4726-9e3f-723cd53c4d05","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T15:14:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6373d501-eed0-4726-9e3f-723cd53c4d05","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T15:14:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6373d501-eed0-4726-9e3f-723cd53c4d05","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T15:14:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6373d501-eed0-4726-9e3f-723cd53c4d05","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T15:14:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6373d501-eed0-4726-9e3f-723cd53c4d05","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T15:14:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c9582afb-7c27-45b9-b363-dfd401004929","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:53422","PortSpecifier":{"PortValue":53422}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c9582afb-7c27-45b9-b363-dfd401004929","method":"POST","path":"/ai-tenant-e2e-shared-a-ebb1a4/rate-test-model-ebb1a4/v1/completions","host":"e2e-shared-a-ebb1a4.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T15:14:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c9582afb-7c27-45b9-b363-dfd401004929","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:53422","PortSpecifier":{"PortValue":53422}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784042074,"nanos":941254490},"http":{"id":"c9582afb-7c27-45b9-b363-dfd401004929","method":"POST","headers":{":authority":"e2e-shared-a-ebb1a4.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ebb1a4/rate-test-model-ebb1a4/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T15:14:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c9582afb-7c27-45b9-b363-dfd401004929","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1MG5NHkkDW3XP1sep_uQr2kvwYIdiiA6xAmhONbqDCQSz3B1hlUyJGWwrd11B"} {"level":"debug","ts":"2026-07-14T15:14:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c9582afb-7c27-45b9-b363-dfd401004929","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ebb1a4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1MG5NHkkDW3XP1sep_uQr2kvwYIdiiA6xAmhONbqDCQSz3B1hlUyJGWwrd11B\"}"} {"level":"debug","ts":"2026-07-14T15:14:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c9582afb-7c27-45b9-b363-dfd401004929","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ebb1a4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"556e195e-fe9c-49bd-8e60-af5f13441185","keyName":"e2e-rate-a-b0419c","subscription":"e2e-rate-iso-a-b0419c","tenant":"e2e-shared-a-ebb1a4","userId":"556e195e-fe9c-49bd-8e60-af5f13441185","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T15:14:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c9582afb-7c27-45b9-b363-dfd401004929","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ebb1a4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ebb1a4/rate-test-model-ebb1a4\",\"requestedSubscription\":\"e2e-rate-iso-a-b0419c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T15:14:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c9582afb-7c27-45b9-b363-dfd401004929","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ebb1a4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ebb1a4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b0419c","namespace":"ai-tenant-e2e-shared-a-ebb1a4","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T15:14:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c9582afb-7c27-45b9-b363-dfd401004929","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T15:14:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9582afb-7c27-45b9-b363-dfd401004929","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:14:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9582afb-7c27-45b9-b363-dfd401004929","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:14:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9582afb-7c27-45b9-b363-dfd401004929","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ebb1a4/rate-test-model-ebb1a4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ebb1a4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:14:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9582afb-7c27-45b9-b363-dfd401004929","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:14:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9582afb-7c27-45b9-b363-dfd401004929","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T15:14:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9582afb-7c27-45b9-b363-dfd401004929","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T15:14:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9582afb-7c27-45b9-b363-dfd401004929","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b0419c"} {"level":"debug","ts":"2026-07-14T15:14:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9582afb-7c27-45b9-b363-dfd401004929","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"556e195e-fe9c-49bd-8e60-af5f13441185","keyName":"e2e-rate-a-b0419c","selected_subscription":"e2e-rate-iso-a-b0419c","selected_subscription_key":"ai-tenant-e2e-shared-a-ebb1a4/e2e-rate-iso-a-b0419c@ai-tenant-e2e-shared-a-ebb1a4/rate-test-model-ebb1a4","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ebb1a4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b0419c","namespace":"ai-tenant-e2e-shared-a-ebb1a4","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T15:14:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c9582afb-7c27-45b9-b363-dfd401004929","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T15:14:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c9582afb-7c27-45b9-b363-dfd401004929","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T15:14:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"07697a77-1da2-4f04-849c-29857e6fd5a4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:53438","PortSpecifier":{"PortValue":53438}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"07697a77-1da2-4f04-849c-29857e6fd5a4","method":"POST","path":"/ai-tenant-e2e-shared-a-ebb1a4/rate-test-model-ebb1a4/v1/completions","host":"e2e-shared-a-ebb1a4.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T15:14:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"07697a77-1da2-4f04-849c-29857e6fd5a4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:53438","PortSpecifier":{"PortValue":53438}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784042075,"nanos":980544176},"http":{"id":"07697a77-1da2-4f04-849c-29857e6fd5a4","method":"POST","headers":{":authority":"e2e-shared-a-ebb1a4.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ebb1a4/rate-test-model-ebb1a4/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T15:14:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"07697a77-1da2-4f04-849c-29857e6fd5a4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1MG5NHkkDW3XP1sep_uQr2kvwYIdiiA6xAmhONbqDCQSz3B1hlUyJGWwrd11B"} {"level":"debug","ts":"2026-07-14T15:14:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"07697a77-1da2-4f04-849c-29857e6fd5a4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ebb1a4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1MG5NHkkDW3XP1sep_uQr2kvwYIdiiA6xAmhONbqDCQSz3B1hlUyJGWwrd11B\"}"} {"level":"debug","ts":"2026-07-14T15:14:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"07697a77-1da2-4f04-849c-29857e6fd5a4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ebb1a4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"556e195e-fe9c-49bd-8e60-af5f13441185","keyName":"e2e-rate-a-b0419c","subscription":"e2e-rate-iso-a-b0419c","tenant":"e2e-shared-a-ebb1a4","userId":"556e195e-fe9c-49bd-8e60-af5f13441185","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T15:14:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"07697a77-1da2-4f04-849c-29857e6fd5a4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ebb1a4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ebb1a4/rate-test-model-ebb1a4\",\"requestedSubscription\":\"e2e-rate-iso-a-b0419c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T15:14:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"07697a77-1da2-4f04-849c-29857e6fd5a4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ebb1a4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ebb1a4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b0419c","namespace":"ai-tenant-e2e-shared-a-ebb1a4","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T15:14:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"07697a77-1da2-4f04-849c-29857e6fd5a4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T15:14:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07697a77-1da2-4f04-849c-29857e6fd5a4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:14:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07697a77-1da2-4f04-849c-29857e6fd5a4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:14:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07697a77-1da2-4f04-849c-29857e6fd5a4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ebb1a4/rate-test-model-ebb1a4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ebb1a4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:14:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07697a77-1da2-4f04-849c-29857e6fd5a4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:14:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"07697a77-1da2-4f04-849c-29857e6fd5a4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b0419c"} {"level":"debug","ts":"2026-07-14T15:14:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"07697a77-1da2-4f04-849c-29857e6fd5a4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T15:14:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"07697a77-1da2-4f04-849c-29857e6fd5a4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T15:14:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"07697a77-1da2-4f04-849c-29857e6fd5a4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"556e195e-fe9c-49bd-8e60-af5f13441185","keyName":"e2e-rate-a-b0419c","selected_subscription":"e2e-rate-iso-a-b0419c","selected_subscription_key":"ai-tenant-e2e-shared-a-ebb1a4/e2e-rate-iso-a-b0419c@ai-tenant-e2e-shared-a-ebb1a4/rate-test-model-ebb1a4","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ebb1a4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b0419c","namespace":"ai-tenant-e2e-shared-a-ebb1a4","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T15:14:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"07697a77-1da2-4f04-849c-29857e6fd5a4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T15:14:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"07697a77-1da2-4f04-849c-29857e6fd5a4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T15:14:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1e1e0af-986a-44c1-8398-705b410dd19b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:53452","PortSpecifier":{"PortValue":53452}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c1e1e0af-986a-44c1-8398-705b410dd19b","method":"POST","path":"/ai-tenant-e2e-shared-a-ebb1a4/rate-test-model-ebb1a4/v1/completions","host":"e2e-shared-a-ebb1a4.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T15:14:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1e1e0af-986a-44c1-8398-705b410dd19b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:53452","PortSpecifier":{"PortValue":53452}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784042077,"nanos":27327246},"http":{"id":"c1e1e0af-986a-44c1-8398-705b410dd19b","method":"POST","headers":{":authority":"e2e-shared-a-ebb1a4.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ebb1a4/rate-test-model-ebb1a4/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T15:14:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c1e1e0af-986a-44c1-8398-705b410dd19b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1MG5NHkkDW3XP1sep_uQr2kvwYIdiiA6xAmhONbqDCQSz3B1hlUyJGWwrd11B"} {"level":"debug","ts":"2026-07-14T15:14:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c1e1e0af-986a-44c1-8398-705b410dd19b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ebb1a4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1MG5NHkkDW3XP1sep_uQr2kvwYIdiiA6xAmhONbqDCQSz3B1hlUyJGWwrd11B\"}"} {"level":"debug","ts":"2026-07-14T15:14:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c1e1e0af-986a-44c1-8398-705b410dd19b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ebb1a4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"556e195e-fe9c-49bd-8e60-af5f13441185","keyName":"e2e-rate-a-b0419c","subscription":"e2e-rate-iso-a-b0419c","tenant":"e2e-shared-a-ebb1a4","userId":"556e195e-fe9c-49bd-8e60-af5f13441185","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T15:14:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c1e1e0af-986a-44c1-8398-705b410dd19b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ebb1a4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ebb1a4/rate-test-model-ebb1a4\",\"requestedSubscription\":\"e2e-rate-iso-a-b0419c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T15:14:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c1e1e0af-986a-44c1-8398-705b410dd19b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ebb1a4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ebb1a4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b0419c","namespace":"ai-tenant-e2e-shared-a-ebb1a4","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T15:14:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c1e1e0af-986a-44c1-8398-705b410dd19b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T15:14:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1e1e0af-986a-44c1-8398-705b410dd19b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:14:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1e1e0af-986a-44c1-8398-705b410dd19b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:14:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1e1e0af-986a-44c1-8398-705b410dd19b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:14:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1e1e0af-986a-44c1-8398-705b410dd19b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ebb1a4/rate-test-model-ebb1a4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ebb1a4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:14:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1e1e0af-986a-44c1-8398-705b410dd19b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T15:14:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1e1e0af-986a-44c1-8398-705b410dd19b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b0419c"} {"level":"debug","ts":"2026-07-14T15:14:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1e1e0af-986a-44c1-8398-705b410dd19b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T15:14:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1e1e0af-986a-44c1-8398-705b410dd19b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"556e195e-fe9c-49bd-8e60-af5f13441185","keyName":"e2e-rate-a-b0419c","selected_subscription":"e2e-rate-iso-a-b0419c","selected_subscription_key":"ai-tenant-e2e-shared-a-ebb1a4/e2e-rate-iso-a-b0419c@ai-tenant-e2e-shared-a-ebb1a4/rate-test-model-ebb1a4","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ebb1a4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b0419c","namespace":"ai-tenant-e2e-shared-a-ebb1a4","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T15:14:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1e1e0af-986a-44c1-8398-705b410dd19b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T15:14:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1e1e0af-986a-44c1-8398-705b410dd19b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T15:14:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3476aaba-0b09-4639-b288-4ff3c5c11799","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:60714","PortSpecifier":{"PortValue":60714}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3476aaba-0b09-4639-b288-4ff3c5c11799","method":"POST","path":"/ai-tenant-e2e-shared-b-747ac7/rate-test-model-747ac7/v1/completions","host":"e2e-shared-b-747ac7.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T15:14:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3476aaba-0b09-4639-b288-4ff3c5c11799","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:60714","PortSpecifier":{"PortValue":60714}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784042077,"nanos":78182537},"http":{"id":"3476aaba-0b09-4639-b288-4ff3c5c11799","method":"POST","headers":{":authority":"e2e-shared-b-747ac7.apps.223f50f2-add6-42aa-be0a-f6461cc0c70f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-747ac7/rate-test-model-747ac7/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T15:14:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3476aaba-0b09-4639-b288-4ff3c5c11799","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Tkq8VGh3IccU33tD_j9LEVGguUKRHe93qKm8NW7jaGV0p7oYwsynVcDw4QK0"} {"level":"debug","ts":"2026-07-14T15:14:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3476aaba-0b09-4639-b288-4ff3c5c11799","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-747ac7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Tkq8VGh3IccU33tD_j9LEVGguUKRHe93qKm8NW7jaGV0p7oYwsynVcDw4QK0\"}"} {"level":"debug","ts":"2026-07-14T15:14:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3476aaba-0b09-4639-b288-4ff3c5c11799","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-747ac7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"75eb0e6a-f45e-4039-b5b8-bd344a3efb01","keyName":"e2e-rate-b-b0419c","subscription":"e2e-rate-iso-b-b0419c","tenant":"e2e-shared-b-747ac7","userId":"75eb0e6a-f45e-4039-b5b8-bd344a3efb01","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T15:14:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3476aaba-0b09-4639-b288-4ff3c5c11799","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-747ac7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-747ac7/rate-test-model-747ac7\",\"requestedSubscription\":\"e2e-rate-iso-b-b0419c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T15:14:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3476aaba-0b09-4639-b288-4ff3c5c11799","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-747ac7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-747ac7","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-b0419c","namespace":"ai-tenant-e2e-shared-b-747ac7","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T15:14:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3476aaba-0b09-4639-b288-4ff3c5c11799","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T15:14:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3476aaba-0b09-4639-b288-4ff3c5c11799","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:14:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3476aaba-0b09-4639-b288-4ff3c5c11799","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:14:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3476aaba-0b09-4639-b288-4ff3c5c11799","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-747ac7/rate-test-model-747ac7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-747ac7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:14:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3476aaba-0b09-4639-b288-4ff3c5c11799","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T15:14:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3476aaba-0b09-4639-b288-4ff3c5c11799","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T15:14:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3476aaba-0b09-4639-b288-4ff3c5c11799","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-b0419c"} {"level":"debug","ts":"2026-07-14T15:14:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3476aaba-0b09-4639-b288-4ff3c5c11799","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T15:14:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3476aaba-0b09-4639-b288-4ff3c5c11799","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"75eb0e6a-f45e-4039-b5b8-bd344a3efb01","keyName":"e2e-rate-b-b0419c","selected_subscription":"e2e-rate-iso-b-b0419c","selected_subscription_key":"ai-tenant-e2e-shared-b-747ac7/e2e-rate-iso-b-b0419c@ai-tenant-e2e-shared-b-747ac7/rate-test-model-747ac7","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-747ac7","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-b0419c","namespace":"ai-tenant-e2e-shared-b-747ac7","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T15:14:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3476aaba-0b09-4639-b288-4ff3c5c11799","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T15:14:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3476aaba-0b09-4639-b288-4ff3c5c11799","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T15:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/150a47d50c23dc331554891c6795666ecb740f85f75f80928a8e306a8ae89a49"} {"level":"info","ts":"2026-07-14T15:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4f576862da9f1396985c4d9d2daed352f6b839705ad896cc942540400fb93e3d"} {"level":"info","ts":"2026-07-14T15:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a133966c4020af4b4ba343a6be1186a53f536d09cc17c23d054cd03f3c85d631"} {"level":"info","ts":"2026-07-14T15:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6d0518cceaf532e6576923b79953cf44c35d9fc6fcdfd5c6be4755dd029a9cb5"} {"level":"info","ts":"2026-07-14T15:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/805d8a63f690215c3b91f5755340020a8f04487b5293e5c121396ef8eefb6521"} {"level":"info","ts":"2026-07-14T15:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a845459c300a342f45df4bd8d697f2308a435236ecbdc17c02fad53465b432a4"} {"level":"info","ts":"2026-07-14T15:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4175e5b0fc452c7df42409b66698993493921e694c0c77843db56dbb72f576f8"} {"level":"info","ts":"2026-07-14T15:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7e1c399ed549c69ee508d0a20bdac264ac7f3313f1dc0c511679a9e34dd9a8c3"} {"level":"info","ts":"2026-07-14T15:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/54c73acb141217a0bf6354452bb50072e5bfee74a08ef994eccb025f9b4f0b6a"} {"level":"info","ts":"2026-07-14T15:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d22bb89d77cf81926d68870abc88ebd231bfbbb265c959a739544054bcd44b3f"} {"level":"info","ts":"2026-07-14T15:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f84304e9bfef82d412262ec2265e7059d79629f6dc867ae33ed959ca023eed45"} {"level":"info","ts":"2026-07-14T15:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/91de55fa05560acee45110c5d06d46fdb9cbed66755b7091063a27d0760f688e"} {"level":"info","ts":"2026-07-14T15:14:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9be56ef9615814dd12949bbc1478e24d2baae5b17c6f6b240b1cbb3d87bbf3c7"} {"level":"info","ts":"2026-07-14T15:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4aa9cf714ddb03a3ffbe4dbca6df80180583ea435c65fa671874db84d00312ce"} {"level":"info","ts":"2026-07-14T15:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c015df19ce54c5bfc8c982d8b6e7e983014e6a8b1968bdb918a7fbcc8350f65f"} {"level":"info","ts":"2026-07-14T15:14:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eed8b5e10ac57185b9fe577b5b384baa90122f55f2e957a87fc4b7a84afa476e"} {"level":"info","ts":"2026-07-14T15:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c869ed378b6eee38de6e0dc2b1bab7f0abdb1f511f03c708da07d5124d80181f"} {"level":"info","ts":"2026-07-14T15:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/604061bd58f8ea487ef30b6275a5670c166e9a232b6f7287a0da92793239fb2e"} {"level":"info","ts":"2026-07-14T15:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/01e8578cad5cad5575f5761d7243d96a2a39aefdb0869350d243a804078c3375"} {"level":"info","ts":"2026-07-14T15:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6be90af30f03e34aecafc74c8eaf3895a372be54be7938c6e8704761f8f84d0d"} {"level":"info","ts":"2026-07-14T15:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9ad3d2963286dfc8bb82452471e5fb70b183e3b27645dfc66d8353a5b2fe03bc"} {"level":"info","ts":"2026-07-14T15:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4f4a1703447958cab3315055ee7e5a173e8aebd3d60d1917ee4b9e85fe668064"} {"level":"info","ts":"2026-07-14T15:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e1c9d5b05f94d0f58cd7caaeb0e508cfa4eb11658645a419874be64ec37c4310"} {"level":"info","ts":"2026-07-14T15:15:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/28aa1448daedcbf487763a3ecb505848171ea0c754cc36b45478825e587d91ba"}