--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"debug","ts":"2026-07-10T21:12:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0f72098e57f516e06df1fd9a27f5bbdb0b443d6ba7c83d5c51613e9abe0a4ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d123240363a55ee258442290a667ae2eeac52a6f03b0e5bcc6df84434bacb99f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:12:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:12:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d123240363a55ee258442290a667ae2eeac52a6f03b0e5bcc6df84434bacb99f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d123240363a55ee258442290a667ae2eeac52a6f03b0e5bcc6df84434bacb99f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d123240363a55ee258442290a667ae2eeac52a6f03b0e5bcc6df84434bacb99f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:12:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0f72098e57f516e06df1fd9a27f5bbdb0b443d6ba7c83d5c51613e9abe0a4ac"} {"level":"debug","ts":"2026-07-10T21:12:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d123240363a55ee258442290a667ae2eeac52a6f03b0e5bcc6df84434bacb99f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:12:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:12:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d123240363a55ee258442290a667ae2eeac52a6f03b0e5bcc6df84434bacb99f"} {"level":"info","ts":"2026-07-10T21:12:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d123240363a55ee258442290a667ae2eeac52a6f03b0e5bcc6df84434bacb99f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d123240363a55ee258442290a667ae2eeac52a6f03b0e5bcc6df84434bacb99f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:12:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:12:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d123240363a55ee258442290a667ae2eeac52a6f03b0e5bcc6df84434bacb99f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d123240363a55ee258442290a667ae2eeac52a6f03b0e5bcc6df84434bacb99f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d123240363a55ee258442290a667ae2eeac52a6f03b0e5bcc6df84434bacb99f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:12:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:12:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d123240363a55ee258442290a667ae2eeac52a6f03b0e5bcc6df84434bacb99f"} {"level":"info","ts":"2026-07-10T21:12:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d123240363a55ee258442290a667ae2eeac52a6f03b0e5bcc6df84434bacb99f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d123240363a55ee258442290a667ae2eeac52a6f03b0e5bcc6df84434bacb99f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d123240363a55ee258442290a667ae2eeac52a6f03b0e5bcc6df84434bacb99f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:12:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d123240363a55ee258442290a667ae2eeac52a6f03b0e5bcc6df84434bacb99f"} {"level":"debug","ts":"2026-07-10T21:12:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d123240363a55ee258442290a667ae2eeac52a6f03b0e5bcc6df84434bacb99f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfaef856ecf265448e7736b6ac0397b2cb57cfc9560fa209eefd18ddf1c15590","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:12:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:12:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d123240363a55ee258442290a667ae2eeac52a6f03b0e5bcc6df84434bacb99f"} {"level":"info","ts":"2026-07-10T21:12:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfaef856ecf265448e7736b6ac0397b2cb57cfc9560fa209eefd18ddf1c15590","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfaef856ecf265448e7736b6ac0397b2cb57cfc9560fa209eefd18ddf1c15590","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:12:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:12:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfaef856ecf265448e7736b6ac0397b2cb57cfc9560fa209eefd18ddf1c15590"} {"level":"info","ts":"2026-07-10T21:12:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfaef856ecf265448e7736b6ac0397b2cb57cfc9560fa209eefd18ddf1c15590","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfaef856ecf265448e7736b6ac0397b2cb57cfc9560fa209eefd18ddf1c15590","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:12:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:12:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-10T21:12:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bfaef856ecf265448e7736b6ac0397b2cb57cfc9560fa209eefd18ddf1c15590","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bfaef856ecf265448e7736b6ac0397b2cb57cfc9560fa209eefd18ddf1c15590\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T21:12:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfaef856ecf265448e7736b6ac0397b2cb57cfc9560fa209eefd18ddf1c15590","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d123240363a55ee258442290a667ae2eeac52a6f03b0e5bcc6df84434bacb99f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:12:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:12:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d123240363a55ee258442290a667ae2eeac52a6f03b0e5bcc6df84434bacb99f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfaef856ecf265448e7736b6ac0397b2cb57cfc9560fa209eefd18ddf1c15590"} {"level":"info","ts":"2026-07-10T21:12:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d123240363a55ee258442290a667ae2eeac52a6f03b0e5bcc6df84434bacb99f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfaef856ecf265448e7736b6ac0397b2cb57cfc9560fa209eefd18ddf1c15590","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d123240363a55ee258442290a667ae2eeac52a6f03b0e5bcc6df84434bacb99f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:12:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfaef856ecf265448e7736b6ac0397b2cb57cfc9560fa209eefd18ddf1c15590"} {"level":"debug","ts":"2026-07-10T21:12:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24524a1d51248cba3a40c7e7f44202c67a72653e09cc58c30f24e9a823871ba6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:12:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:12:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d123240363a55ee258442290a667ae2eeac52a6f03b0e5bcc6df84434bacb99f"} {"level":"info","ts":"2026-07-10T21:12:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24524a1d51248cba3a40c7e7f44202c67a72653e09cc58c30f24e9a823871ba6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e004fc39aec7683eaecc11b7b6c93b8bd1ffd0d8982fc25f82c964b3db093ff8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:12:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:12:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24524a1d51248cba3a40c7e7f44202c67a72653e09cc58c30f24e9a823871ba6"} {"level":"info","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e004fc39aec7683eaecc11b7b6c93b8bd1ffd0d8982fc25f82c964b3db093ff8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24524a1d51248cba3a40c7e7f44202c67a72653e09cc58c30f24e9a823871ba6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:12:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:12:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24524a1d51248cba3a40c7e7f44202c67a72653e09cc58c30f24e9a823871ba6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24524a1d51248cba3a40c7e7f44202c67a72653e09cc58c30f24e9a823871ba6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e004fc39aec7683eaecc11b7b6c93b8bd1ffd0d8982fc25f82c964b3db093ff8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:12:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:12:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e004fc39aec7683eaecc11b7b6c93b8bd1ffd0d8982fc25f82c964b3db093ff8"} {"level":"info","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e004fc39aec7683eaecc11b7b6c93b8bd1ffd0d8982fc25f82c964b3db093ff8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfaef856ecf265448e7736b6ac0397b2cb57cfc9560fa209eefd18ddf1c15590","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:12:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:12:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfaef856ecf265448e7736b6ac0397b2cb57cfc9560fa209eefd18ddf1c15590"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24524a1d51248cba3a40c7e7f44202c67a72653e09cc58c30f24e9a823871ba6"} {"level":"info","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfaef856ecf265448e7736b6ac0397b2cb57cfc9560fa209eefd18ddf1c15590","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24524a1d51248cba3a40c7e7f44202c67a72653e09cc58c30f24e9a823871ba6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e004fc39aec7683eaecc11b7b6c93b8bd1ffd0d8982fc25f82c964b3db093ff8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfaef856ecf265448e7736b6ac0397b2cb57cfc9560fa209eefd18ddf1c15590","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e004fc39aec7683eaecc11b7b6c93b8bd1ffd0d8982fc25f82c964b3db093ff8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e004fc39aec7683eaecc11b7b6c93b8bd1ffd0d8982fc25f82c964b3db093ff8"} {"level":"info","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfaef856ecf265448e7736b6ac0397b2cb57cfc9560fa209eefd18ddf1c15590"} {"level":"debug","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e004fc39aec7683eaecc11b7b6c93b8bd1ffd0d8982fc25f82c964b3db093ff8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:12:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:12:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e004fc39aec7683eaecc11b7b6c93b8bd1ffd0d8982fc25f82c964b3db093ff8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e004fc39aec7683eaecc11b7b6c93b8bd1ffd0d8982fc25f82c964b3db093ff8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e004fc39aec7683eaecc11b7b6c93b8bd1ffd0d8982fc25f82c964b3db093ff8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:12:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:12:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e004fc39aec7683eaecc11b7b6c93b8bd1ffd0d8982fc25f82c964b3db093ff8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e004fc39aec7683eaecc11b7b6c93b8bd1ffd0d8982fc25f82c964b3db093ff8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e004fc39aec7683eaecc11b7b6c93b8bd1ffd0d8982fc25f82c964b3db093ff8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e004fc39aec7683eaecc11b7b6c93b8bd1ffd0d8982fc25f82c964b3db093ff8"} {"level":"debug","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e004fc39aec7683eaecc11b7b6c93b8bd1ffd0d8982fc25f82c964b3db093ff8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e004fc39aec7683eaecc11b7b6c93b8bd1ffd0d8982fc25f82c964b3db093ff8"} {"level":"debug","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75c8af7100d52c24189d533bf124c8e0e83458f848eb815e2fd5c424e15dd08e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:12:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:12:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75c8af7100d52c24189d533bf124c8e0e83458f848eb815e2fd5c424e15dd08e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75c8af7100d52c24189d533bf124c8e0e83458f848eb815e2fd5c424e15dd08e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75c8af7100d52c24189d533bf124c8e0e83458f848eb815e2fd5c424e15dd08e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75c8af7100d52c24189d533bf124c8e0e83458f848eb815e2fd5c424e15dd08e"} {"level":"debug","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e004fc39aec7683eaecc11b7b6c93b8bd1ffd0d8982fc25f82c964b3db093ff8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:12:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:12:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e004fc39aec7683eaecc11b7b6c93b8bd1ffd0d8982fc25f82c964b3db093ff8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75c8af7100d52c24189d533bf124c8e0e83458f848eb815e2fd5c424e15dd08e"} {"level":"info","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e004fc39aec7683eaecc11b7b6c93b8bd1ffd0d8982fc25f82c964b3db093ff8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75c8af7100d52c24189d533bf124c8e0e83458f848eb815e2fd5c424e15dd08e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:12:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:12:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75c8af7100d52c24189d533bf124c8e0e83458f848eb815e2fd5c424e15dd08e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75c8af7100d52c24189d533bf124c8e0e83458f848eb815e2fd5c424e15dd08e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e004fc39aec7683eaecc11b7b6c93b8bd1ffd0d8982fc25f82c964b3db093ff8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:12:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:12:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e004fc39aec7683eaecc11b7b6c93b8bd1ffd0d8982fc25f82c964b3db093ff8"} {"level":"info","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e004fc39aec7683eaecc11b7b6c93b8bd1ffd0d8982fc25f82c964b3db093ff8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75c8af7100d52c24189d533bf124c8e0e83458f848eb815e2fd5c424e15dd08e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:12:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:12:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75c8af7100d52c24189d533bf124c8e0e83458f848eb815e2fd5c424e15dd08e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e004fc39aec7683eaecc11b7b6c93b8bd1ffd0d8982fc25f82c964b3db093ff8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:12:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:12:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e004fc39aec7683eaecc11b7b6c93b8bd1ffd0d8982fc25f82c964b3db093ff8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75c8af7100d52c24189d533bf124c8e0e83458f848eb815e2fd5c424e15dd08e"} {"level":"info","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e004fc39aec7683eaecc11b7b6c93b8bd1ffd0d8982fc25f82c964b3db093ff8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75c8af7100d52c24189d533bf124c8e0e83458f848eb815e2fd5c424e15dd08e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:12:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:12:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75c8af7100d52c24189d533bf124c8e0e83458f848eb815e2fd5c424e15dd08e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75c8af7100d52c24189d533bf124c8e0e83458f848eb815e2fd5c424e15dd08e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e004fc39aec7683eaecc11b7b6c93b8bd1ffd0d8982fc25f82c964b3db093ff8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:12:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:12:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e004fc39aec7683eaecc11b7b6c93b8bd1ffd0d8982fc25f82c964b3db093ff8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75c8af7100d52c24189d533bf124c8e0e83458f848eb815e2fd5c424e15dd08e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e004fc39aec7683eaecc11b7b6c93b8bd1ffd0d8982fc25f82c964b3db093ff8"} {"level":"debug","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e004fc39aec7683eaecc11b7b6c93b8bd1ffd0d8982fc25f82c964b3db093ff8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e004fc39aec7683eaecc11b7b6c93b8bd1ffd0d8982fc25f82c964b3db093ff8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:12:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:12:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e004fc39aec7683eaecc11b7b6c93b8bd1ffd0d8982fc25f82c964b3db093ff8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e004fc39aec7683eaecc11b7b6c93b8bd1ffd0d8982fc25f82c964b3db093ff8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e004fc39aec7683eaecc11b7b6c93b8bd1ffd0d8982fc25f82c964b3db093ff8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75c8af7100d52c24189d533bf124c8e0e83458f848eb815e2fd5c424e15dd08e"} {"level":"debug","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f7bb5b14512bb117dd77dc985b53a88e03395ffa05751ca22feedb00fb46c29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:12:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:12:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e004fc39aec7683eaecc11b7b6c93b8bd1ffd0d8982fc25f82c964b3db093ff8"} {"level":"info","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f7bb5b14512bb117dd77dc985b53a88e03395ffa05751ca22feedb00fb46c29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f7bb5b14512bb117dd77dc985b53a88e03395ffa05751ca22feedb00fb46c29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:12:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:12:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f7bb5b14512bb117dd77dc985b53a88e03395ffa05751ca22feedb00fb46c29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f7bb5b14512bb117dd77dc985b53a88e03395ffa05751ca22feedb00fb46c29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:12:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:12:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f7bb5b14512bb117dd77dc985b53a88e03395ffa05751ca22feedb00fb46c29"} {"level":"error","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2f7bb5b14512bb117dd77dc985b53a88e03395ffa05751ca22feedb00fb46c29","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2f7bb5b14512bb117dd77dc985b53a88e03395ffa05751ca22feedb00fb46c29\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f7bb5b14512bb117dd77dc985b53a88e03395ffa05751ca22feedb00fb46c29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f7bb5b14512bb117dd77dc985b53a88e03395ffa05751ca22feedb00fb46c29","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f7bb5b14512bb117dd77dc985b53a88e03395ffa05751ca22feedb00fb46c29"} {"level":"debug","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"234f8df64755515ec2dc4af874b44f74d57995744280f19e8df8b596b70eb284","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:12:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:12:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"234f8df64755515ec2dc4af874b44f74d57995744280f19e8df8b596b70eb284","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"234f8df64755515ec2dc4af874b44f74d57995744280f19e8df8b596b70eb284","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"234f8df64755515ec2dc4af874b44f74d57995744280f19e8df8b596b70eb284","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f7bb5b14512bb117dd77dc985b53a88e03395ffa05751ca22feedb00fb46c29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:12:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:12:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f7bb5b14512bb117dd77dc985b53a88e03395ffa05751ca22feedb00fb46c29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/234f8df64755515ec2dc4af874b44f74d57995744280f19e8df8b596b70eb284"} {"level":"info","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f7bb5b14512bb117dd77dc985b53a88e03395ffa05751ca22feedb00fb46c29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f7bb5b14512bb117dd77dc985b53a88e03395ffa05751ca22feedb00fb46c29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"234f8df64755515ec2dc4af874b44f74d57995744280f19e8df8b596b70eb284","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/234f8df64755515ec2dc4af874b44f74d57995744280f19e8df8b596b70eb284"} {"level":"info","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f7bb5b14512bb117dd77dc985b53a88e03395ffa05751ca22feedb00fb46c29"} {"level":"debug","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"234f8df64755515ec2dc4af874b44f74d57995744280f19e8df8b596b70eb284","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:12:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:12:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["234f8df64755515ec2dc4af874b44f74d57995744280f19e8df8b596b70eb284"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"234f8df64755515ec2dc4af874b44f74d57995744280f19e8df8b596b70eb284","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"234f8df64755515ec2dc4af874b44f74d57995744280f19e8df8b596b70eb284","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:12:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:12:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"234f8df64755515ec2dc4af874b44f74d57995744280f19e8df8b596b70eb284","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"234f8df64755515ec2dc4af874b44f74d57995744280f19e8df8b596b70eb284","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"234f8df64755515ec2dc4af874b44f74d57995744280f19e8df8b596b70eb284","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/234f8df64755515ec2dc4af874b44f74d57995744280f19e8df8b596b70eb284"} {"level":"debug","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"234f8df64755515ec2dc4af874b44f74d57995744280f19e8df8b596b70eb284","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/234f8df64755515ec2dc4af874b44f74d57995744280f19e8df8b596b70eb284"} {"level":"debug","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"234f8df64755515ec2dc4af874b44f74d57995744280f19e8df8b596b70eb284","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:12:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:12:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["234f8df64755515ec2dc4af874b44f74d57995744280f19e8df8b596b70eb284"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"234f8df64755515ec2dc4af874b44f74d57995744280f19e8df8b596b70eb284","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"234f8df64755515ec2dc4af874b44f74d57995744280f19e8df8b596b70eb284","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:12:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:12:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"234f8df64755515ec2dc4af874b44f74d57995744280f19e8df8b596b70eb284","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f68c6ca8db5c6669f07911bb160f93bff711dd38f96b53799fc0322338d213b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:12:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:12:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/234f8df64755515ec2dc4af874b44f74d57995744280f19e8df8b596b70eb284"} {"level":"info","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f68c6ca8db5c6669f07911bb160f93bff711dd38f96b53799fc0322338d213b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"234f8df64755515ec2dc4af874b44f74d57995744280f19e8df8b596b70eb284","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:12:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:12:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["234f8df64755515ec2dc4af874b44f74d57995744280f19e8df8b596b70eb284"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f68c6ca8db5c6669f07911bb160f93bff711dd38f96b53799fc0322338d213b3"} {"level":"info","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"234f8df64755515ec2dc4af874b44f74d57995744280f19e8df8b596b70eb284","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f68c6ca8db5c6669f07911bb160f93bff711dd38f96b53799fc0322338d213b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:12:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:12:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f68c6ca8db5c6669f07911bb160f93bff711dd38f96b53799fc0322338d213b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f68c6ca8db5c6669f07911bb160f93bff711dd38f96b53799fc0322338d213b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"234f8df64755515ec2dc4af874b44f74d57995744280f19e8df8b596b70eb284","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:12:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:12:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/234f8df64755515ec2dc4af874b44f74d57995744280f19e8df8b596b70eb284"} {"level":"info","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"234f8df64755515ec2dc4af874b44f74d57995744280f19e8df8b596b70eb284","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f68c6ca8db5c6669f07911bb160f93bff711dd38f96b53799fc0322338d213b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:12:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:12:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f68c6ca8db5c6669f07911bb160f93bff711dd38f96b53799fc0322338d213b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"234f8df64755515ec2dc4af874b44f74d57995744280f19e8df8b596b70eb284","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:12:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:12:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["234f8df64755515ec2dc4af874b44f74d57995744280f19e8df8b596b70eb284"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f68c6ca8db5c6669f07911bb160f93bff711dd38f96b53799fc0322338d213b3"} {"level":"info","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"234f8df64755515ec2dc4af874b44f74d57995744280f19e8df8b596b70eb284","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f68c6ca8db5c6669f07911bb160f93bff711dd38f96b53799fc0322338d213b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:12:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:12:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f68c6ca8db5c6669f07911bb160f93bff711dd38f96b53799fc0322338d213b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/234f8df64755515ec2dc4af874b44f74d57995744280f19e8df8b596b70eb284"} {"level":"info","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f68c6ca8db5c6669f07911bb160f93bff711dd38f96b53799fc0322338d213b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"234f8df64755515ec2dc4af874b44f74d57995744280f19e8df8b596b70eb284","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dda979ecbc2fddf9870d357957b42eef8f88cc49ca5bc932403aa3ae97eb0af7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:12:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:12:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dda979ecbc2fddf9870d357957b42eef8f88cc49ca5bc932403aa3ae97eb0af7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f68c6ca8db5c6669f07911bb160f93bff711dd38f96b53799fc0322338d213b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:12:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:12:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f68c6ca8db5c6669f07911bb160f93bff711dd38f96b53799fc0322338d213b3"} {"level":"info","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f68c6ca8db5c6669f07911bb160f93bff711dd38f96b53799fc0322338d213b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dda979ecbc2fddf9870d357957b42eef8f88cc49ca5bc932403aa3ae97eb0af7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:12:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:12:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dda979ecbc2fddf9870d357957b42eef8f88cc49ca5bc932403aa3ae97eb0af7"} {"level":"info","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dda979ecbc2fddf9870d357957b42eef8f88cc49ca5bc932403aa3ae97eb0af7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f68c6ca8db5c6669f07911bb160f93bff711dd38f96b53799fc0322338d213b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:12:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:12:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f68c6ca8db5c6669f07911bb160f93bff711dd38f96b53799fc0322338d213b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f68c6ca8db5c6669f07911bb160f93bff711dd38f96b53799fc0322338d213b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dda979ecbc2fddf9870d357957b42eef8f88cc49ca5bc932403aa3ae97eb0af7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:12:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:12:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dda979ecbc2fddf9870d357957b42eef8f88cc49ca5bc932403aa3ae97eb0af7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/234f8df64755515ec2dc4af874b44f74d57995744280f19e8df8b596b70eb284"} {"level":"info","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dda979ecbc2fddf9870d357957b42eef8f88cc49ca5bc932403aa3ae97eb0af7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f68c6ca8db5c6669f07911bb160f93bff711dd38f96b53799fc0322338d213b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:12:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:12:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f68c6ca8db5c6669f07911bb160f93bff711dd38f96b53799fc0322338d213b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dda979ecbc2fddf9870d357957b42eef8f88cc49ca5bc932403aa3ae97eb0af7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f68c6ca8db5c6669f07911bb160f93bff711dd38f96b53799fc0322338d213b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8eee558a6e1b3624d4065fc7008e112d07d12000aeba9ec4e0bbb69202e0afe6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:12:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:12:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f68c6ca8db5c6669f07911bb160f93bff711dd38f96b53799fc0322338d213b3"} {"level":"info","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8eee558a6e1b3624d4065fc7008e112d07d12000aeba9ec4e0bbb69202e0afe6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f68c6ca8db5c6669f07911bb160f93bff711dd38f96b53799fc0322338d213b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:12:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:12:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f68c6ca8db5c6669f07911bb160f93bff711dd38f96b53799fc0322338d213b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dda979ecbc2fddf9870d357957b42eef8f88cc49ca5bc932403aa3ae97eb0af7"} {"level":"info","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f68c6ca8db5c6669f07911bb160f93bff711dd38f96b53799fc0322338d213b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8eee558a6e1b3624d4065fc7008e112d07d12000aeba9ec4e0bbb69202e0afe6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:12:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:12:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8eee558a6e1b3624d4065fc7008e112d07d12000aeba9ec4e0bbb69202e0afe6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f68c6ca8db5c6669f07911bb160f93bff711dd38f96b53799fc0322338d213b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8eee558a6e1b3624d4065fc7008e112d07d12000aeba9ec4e0bbb69202e0afe6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8eee558a6e1b3624d4065fc7008e112d07d12000aeba9ec4e0bbb69202e0afe6"} {"level":"debug","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8eee558a6e1b3624d4065fc7008e112d07d12000aeba9ec4e0bbb69202e0afe6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:12:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:12:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8eee558a6e1b3624d4065fc7008e112d07d12000aeba9ec4e0bbb69202e0afe6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8eee558a6e1b3624d4065fc7008e112d07d12000aeba9ec4e0bbb69202e0afe6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8eee558a6e1b3624d4065fc7008e112d07d12000aeba9ec4e0bbb69202e0afe6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f68c6ca8db5c6669f07911bb160f93bff711dd38f96b53799fc0322338d213b3"} {"level":"info","ts":"2026-07-10T21:12:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8eee558a6e1b3624d4065fc7008e112d07d12000aeba9ec4e0bbb69202e0afe6"} {"level":"debug","ts":"2026-07-10T21:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af644d3b9b9d7d20816df92a1465604eb44c9340e2610711e75a7536d3c1b610","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:12:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:12:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af644d3b9b9d7d20816df92a1465604eb44c9340e2610711e75a7536d3c1b610","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af644d3b9b9d7d20816df92a1465604eb44c9340e2610711e75a7536d3c1b610","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af644d3b9b9d7d20816df92a1465604eb44c9340e2610711e75a7536d3c1b610"} {"level":"debug","ts":"2026-07-10T21:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af644d3b9b9d7d20816df92a1465604eb44c9340e2610711e75a7536d3c1b610","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af644d3b9b9d7d20816df92a1465604eb44c9340e2610711e75a7536d3c1b610","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af644d3b9b9d7d20816df92a1465604eb44c9340e2610711e75a7536d3c1b610"} {"level":"debug","ts":"2026-07-10T21:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af644d3b9b9d7d20816df92a1465604eb44c9340e2610711e75a7536d3c1b610","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:12:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:12:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af644d3b9b9d7d20816df92a1465604eb44c9340e2610711e75a7536d3c1b610"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af644d3b9b9d7d20816df92a1465604eb44c9340e2610711e75a7536d3c1b610","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af644d3b9b9d7d20816df92a1465604eb44c9340e2610711e75a7536d3c1b610","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:12:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:12:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af644d3b9b9d7d20816df92a1465604eb44c9340e2610711e75a7536d3c1b610","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af644d3b9b9d7d20816df92a1465604eb44c9340e2610711e75a7536d3c1b610","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af644d3b9b9d7d20816df92a1465604eb44c9340e2610711e75a7536d3c1b610","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af644d3b9b9d7d20816df92a1465604eb44c9340e2610711e75a7536d3c1b610"} {"level":"debug","ts":"2026-07-10T21:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af644d3b9b9d7d20816df92a1465604eb44c9340e2610711e75a7536d3c1b610","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af644d3b9b9d7d20816df92a1465604eb44c9340e2610711e75a7536d3c1b610"} {"level":"debug","ts":"2026-07-10T21:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af644d3b9b9d7d20816df92a1465604eb44c9340e2610711e75a7536d3c1b610","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:12:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:12:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af644d3b9b9d7d20816df92a1465604eb44c9340e2610711e75a7536d3c1b610"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af644d3b9b9d7d20816df92a1465604eb44c9340e2610711e75a7536d3c1b610","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57dea3d8fd23cd690dfb4e4e7f2713bd6b43347e494ed9c3a93295c590e4c985","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:12:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:12:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57dea3d8fd23cd690dfb4e4e7f2713bd6b43347e494ed9c3a93295c590e4c985","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af644d3b9b9d7d20816df92a1465604eb44c9340e2610711e75a7536d3c1b610","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57dea3d8fd23cd690dfb4e4e7f2713bd6b43347e494ed9c3a93295c590e4c985","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57dea3d8fd23cd690dfb4e4e7f2713bd6b43347e494ed9c3a93295c590e4c985","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57dea3d8fd23cd690dfb4e4e7f2713bd6b43347e494ed9c3a93295c590e4c985"} {"level":"debug","ts":"2026-07-10T21:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57dea3d8fd23cd690dfb4e4e7f2713bd6b43347e494ed9c3a93295c590e4c985","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:12:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:12:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57dea3d8fd23cd690dfb4e4e7f2713bd6b43347e494ed9c3a93295c590e4c985"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af644d3b9b9d7d20816df92a1465604eb44c9340e2610711e75a7536d3c1b610"} {"level":"info","ts":"2026-07-10T21:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57dea3d8fd23cd690dfb4e4e7f2713bd6b43347e494ed9c3a93295c590e4c985","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57dea3d8fd23cd690dfb4e4e7f2713bd6b43347e494ed9c3a93295c590e4c985","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:12:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:12:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57dea3d8fd23cd690dfb4e4e7f2713bd6b43347e494ed9c3a93295c590e4c985","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57dea3d8fd23cd690dfb4e4e7f2713bd6b43347e494ed9c3a93295c590e4c985","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57dea3d8fd23cd690dfb4e4e7f2713bd6b43347e494ed9c3a93295c590e4c985"} {"level":"debug","ts":"2026-07-10T21:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57dea3d8fd23cd690dfb4e4e7f2713bd6b43347e494ed9c3a93295c590e4c985","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57dea3d8fd23cd690dfb4e4e7f2713bd6b43347e494ed9c3a93295c590e4c985"} {"level":"debug","ts":"2026-07-10T21:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57dea3d8fd23cd690dfb4e4e7f2713bd6b43347e494ed9c3a93295c590e4c985","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:12:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:12:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57dea3d8fd23cd690dfb4e4e7f2713bd6b43347e494ed9c3a93295c590e4c985"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57dea3d8fd23cd690dfb4e4e7f2713bd6b43347e494ed9c3a93295c590e4c985","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57dea3d8fd23cd690dfb4e4e7f2713bd6b43347e494ed9c3a93295c590e4c985","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:12:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:12:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57dea3d8fd23cd690dfb4e4e7f2713bd6b43347e494ed9c3a93295c590e4c985","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57dea3d8fd23cd690dfb4e4e7f2713bd6b43347e494ed9c3a93295c590e4c985","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57dea3d8fd23cd690dfb4e4e7f2713bd6b43347e494ed9c3a93295c590e4c985","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57dea3d8fd23cd690dfb4e4e7f2713bd6b43347e494ed9c3a93295c590e4c985"} {"level":"debug","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57dea3d8fd23cd690dfb4e4e7f2713bd6b43347e494ed9c3a93295c590e4c985","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57dea3d8fd23cd690dfb4e4e7f2713bd6b43347e494ed9c3a93295c590e4c985"} {"level":"debug","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57dea3d8fd23cd690dfb4e4e7f2713bd6b43347e494ed9c3a93295c590e4c985","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:12:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:12:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57dea3d8fd23cd690dfb4e4e7f2713bd6b43347e494ed9c3a93295c590e4c985"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57dea3d8fd23cd690dfb4e4e7f2713bd6b43347e494ed9c3a93295c590e4c985","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57dea3d8fd23cd690dfb4e4e7f2713bd6b43347e494ed9c3a93295c590e4c985","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57dea3d8fd23cd690dfb4e4e7f2713bd6b43347e494ed9c3a93295c590e4c985"} {"level":"debug","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da68d0f41c88236afe2bd344371a0e6679f01c57fab3cecf7bb0b806c9a59c7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:12:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:12:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da68d0f41c88236afe2bd344371a0e6679f01c57fab3cecf7bb0b806c9a59c7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da68d0f41c88236afe2bd344371a0e6679f01c57fab3cecf7bb0b806c9a59c7c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da68d0f41c88236afe2bd344371a0e6679f01c57fab3cecf7bb0b806c9a59c7c"} {"level":"debug","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da68d0f41c88236afe2bd344371a0e6679f01c57fab3cecf7bb0b806c9a59c7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da68d0f41c88236afe2bd344371a0e6679f01c57fab3cecf7bb0b806c9a59c7c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da68d0f41c88236afe2bd344371a0e6679f01c57fab3cecf7bb0b806c9a59c7c"} {"level":"debug","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da68d0f41c88236afe2bd344371a0e6679f01c57fab3cecf7bb0b806c9a59c7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:12:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:12:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da68d0f41c88236afe2bd344371a0e6679f01c57fab3cecf7bb0b806c9a59c7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da68d0f41c88236afe2bd344371a0e6679f01c57fab3cecf7bb0b806c9a59c7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da68d0f41c88236afe2bd344371a0e6679f01c57fab3cecf7bb0b806c9a59c7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:12:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:12:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da68d0f41c88236afe2bd344371a0e6679f01c57fab3cecf7bb0b806c9a59c7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da68d0f41c88236afe2bd344371a0e6679f01c57fab3cecf7bb0b806c9a59c7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da68d0f41c88236afe2bd344371a0e6679f01c57fab3cecf7bb0b806c9a59c7c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da68d0f41c88236afe2bd344371a0e6679f01c57fab3cecf7bb0b806c9a59c7c"} {"level":"debug","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da68d0f41c88236afe2bd344371a0e6679f01c57fab3cecf7bb0b806c9a59c7c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da68d0f41c88236afe2bd344371a0e6679f01c57fab3cecf7bb0b806c9a59c7c"} {"level":"debug","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da68d0f41c88236afe2bd344371a0e6679f01c57fab3cecf7bb0b806c9a59c7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:12:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:12:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da68d0f41c88236afe2bd344371a0e6679f01c57fab3cecf7bb0b806c9a59c7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da68d0f41c88236afe2bd344371a0e6679f01c57fab3cecf7bb0b806c9a59c7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da68d0f41c88236afe2bd344371a0e6679f01c57fab3cecf7bb0b806c9a59c7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:12:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:12:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da68d0f41c88236afe2bd344371a0e6679f01c57fab3cecf7bb0b806c9a59c7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55bfa05466c7561edf1ed8d902a1d12e4d203b0b07f06291a64d66394a7b5ed0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:12:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:12:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da68d0f41c88236afe2bd344371a0e6679f01c57fab3cecf7bb0b806c9a59c7c"} {"level":"info","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55bfa05466c7561edf1ed8d902a1d12e4d203b0b07f06291a64d66394a7b5ed0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da68d0f41c88236afe2bd344371a0e6679f01c57fab3cecf7bb0b806c9a59c7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:12:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:12:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da68d0f41c88236afe2bd344371a0e6679f01c57fab3cecf7bb0b806c9a59c7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da68d0f41c88236afe2bd344371a0e6679f01c57fab3cecf7bb0b806c9a59c7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55bfa05466c7561edf1ed8d902a1d12e4d203b0b07f06291a64d66394a7b5ed0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:12:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:12:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55bfa05466c7561edf1ed8d902a1d12e4d203b0b07f06291a64d66394a7b5ed0"} {"level":"info","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55bfa05466c7561edf1ed8d902a1d12e4d203b0b07f06291a64d66394a7b5ed0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da68d0f41c88236afe2bd344371a0e6679f01c57fab3cecf7bb0b806c9a59c7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:12:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:12:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da68d0f41c88236afe2bd344371a0e6679f01c57fab3cecf7bb0b806c9a59c7c"} {"level":"info","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da68d0f41c88236afe2bd344371a0e6679f01c57fab3cecf7bb0b806c9a59c7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55bfa05466c7561edf1ed8d902a1d12e4d203b0b07f06291a64d66394a7b5ed0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da68d0f41c88236afe2bd344371a0e6679f01c57fab3cecf7bb0b806c9a59c7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:12:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:12:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da68d0f41c88236afe2bd344371a0e6679f01c57fab3cecf7bb0b806c9a59c7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55bfa05466c7561edf1ed8d902a1d12e4d203b0b07f06291a64d66394a7b5ed0"} {"level":"info","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da68d0f41c88236afe2bd344371a0e6679f01c57fab3cecf7bb0b806c9a59c7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da68d0f41c88236afe2bd344371a0e6679f01c57fab3cecf7bb0b806c9a59c7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da68d0f41c88236afe2bd344371a0e6679f01c57fab3cecf7bb0b806c9a59c7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:12:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:12:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da68d0f41c88236afe2bd344371a0e6679f01c57fab3cecf7bb0b806c9a59c7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55bfa05466c7561edf1ed8d902a1d12e4d203b0b07f06291a64d66394a7b5ed0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:12:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:12:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55bfa05466c7561edf1ed8d902a1d12e4d203b0b07f06291a64d66394a7b5ed0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da68d0f41c88236afe2bd344371a0e6679f01c57fab3cecf7bb0b806c9a59c7c"} {"level":"info","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55bfa05466c7561edf1ed8d902a1d12e4d203b0b07f06291a64d66394a7b5ed0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da68d0f41c88236afe2bd344371a0e6679f01c57fab3cecf7bb0b806c9a59c7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:12:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:12:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da68d0f41c88236afe2bd344371a0e6679f01c57fab3cecf7bb0b806c9a59c7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e37e76897e1eb8db22ee2808f5b33f1fc8832d466d679334c031358081190534"} {"level":"info","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da68d0f41c88236afe2bd344371a0e6679f01c57fab3cecf7bb0b806c9a59c7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e37e76897e1eb8db22ee2808f5b33f1fc8832d466d679334c031358081190534","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:12:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:12:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e37e76897e1eb8db22ee2808f5b33f1fc8832d466d679334c031358081190534"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e37e76897e1eb8db22ee2808f5b33f1fc8832d466d679334c031358081190534","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55bfa05466c7561edf1ed8d902a1d12e4d203b0b07f06291a64d66394a7b5ed0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da68d0f41c88236afe2bd344371a0e6679f01c57fab3cecf7bb0b806c9a59c7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:12:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:12:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da68d0f41c88236afe2bd344371a0e6679f01c57fab3cecf7bb0b806c9a59c7c"} {"level":"info","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da68d0f41c88236afe2bd344371a0e6679f01c57fab3cecf7bb0b806c9a59c7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e37e76897e1eb8db22ee2808f5b33f1fc8832d466d679334c031358081190534","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da68d0f41c88236afe2bd344371a0e6679f01c57fab3cecf7bb0b806c9a59c7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:12:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:12:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da68d0f41c88236afe2bd344371a0e6679f01c57fab3cecf7bb0b806c9a59c7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55bfa05466c7561edf1ed8d902a1d12e4d203b0b07f06291a64d66394a7b5ed0"} {"level":"info","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da68d0f41c88236afe2bd344371a0e6679f01c57fab3cecf7bb0b806c9a59c7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da68d0f41c88236afe2bd344371a0e6679f01c57fab3cecf7bb0b806c9a59c7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:12:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:12:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da68d0f41c88236afe2bd344371a0e6679f01c57fab3cecf7bb0b806c9a59c7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"da68d0f41c88236afe2bd344371a0e6679f01c57fab3cecf7bb0b806c9a59c7c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"da68d0f41c88236afe2bd344371a0e6679f01c57fab3cecf7bb0b806c9a59c7c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da68d0f41c88236afe2bd344371a0e6679f01c57fab3cecf7bb0b806c9a59c7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da68d0f41c88236afe2bd344371a0e6679f01c57fab3cecf7bb0b806c9a59c7c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e37e76897e1eb8db22ee2808f5b33f1fc8832d466d679334c031358081190534"} {"level":"debug","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7a7c86bc4874b23f72baba6565555819e4e82953b61fde321ff4ee9ab8da92a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:12:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:12:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7a7c86bc4874b23f72baba6565555819e4e82953b61fde321ff4ee9ab8da92a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7a7c86bc4874b23f72baba6565555819e4e82953b61fde321ff4ee9ab8da92a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da68d0f41c88236afe2bd344371a0e6679f01c57fab3cecf7bb0b806c9a59c7c"} {"level":"debug","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7a7c86bc4874b23f72baba6565555819e4e82953b61fde321ff4ee9ab8da92a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:12:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:12:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7a7c86bc4874b23f72baba6565555819e4e82953b61fde321ff4ee9ab8da92a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7a7c86bc4874b23f72baba6565555819e4e82953b61fde321ff4ee9ab8da92a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7a7c86bc4874b23f72baba6565555819e4e82953b61fde321ff4ee9ab8da92a"} {"level":"debug","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7a7c86bc4874b23f72baba6565555819e4e82953b61fde321ff4ee9ab8da92a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7a7c86bc4874b23f72baba6565555819e4e82953b61fde321ff4ee9ab8da92a"} {"level":"debug","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7a7c86bc4874b23f72baba6565555819e4e82953b61fde321ff4ee9ab8da92a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:12:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:12:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e7a7c86bc4874b23f72baba6565555819e4e82953b61fde321ff4ee9ab8da92a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7a7c86bc4874b23f72baba6565555819e4e82953b61fde321ff4ee9ab8da92a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7a7c86bc4874b23f72baba6565555819e4e82953b61fde321ff4ee9ab8da92a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:12:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:12:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7a7c86bc4874b23f72baba6565555819e4e82953b61fde321ff4ee9ab8da92a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7a7c86bc4874b23f72baba6565555819e4e82953b61fde321ff4ee9ab8da92a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7a7c86bc4874b23f72baba6565555819e4e82953b61fde321ff4ee9ab8da92a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7a7c86bc4874b23f72baba6565555819e4e82953b61fde321ff4ee9ab8da92a"} {"level":"debug","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7a7c86bc4874b23f72baba6565555819e4e82953b61fde321ff4ee9ab8da92a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7a7c86bc4874b23f72baba6565555819e4e82953b61fde321ff4ee9ab8da92a"} {"level":"debug","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cfcb0e4da9f1aca6c1eb570cd489ae0742a0b0b67deb79718138d6fa8d25bcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:12:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:12:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cfcb0e4da9f1aca6c1eb570cd489ae0742a0b0b67deb79718138d6fa8d25bcd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6cfcb0e4da9f1aca6c1eb570cd489ae0742a0b0b67deb79718138d6fa8d25bcd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6cfcb0e4da9f1aca6c1eb570cd489ae0742a0b0b67deb79718138d6fa8d25bcd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6cfcb0e4da9f1aca6c1eb570cd489ae0742a0b0b67deb79718138d6fa8d25bcd"} {"level":"debug","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7a7c86bc4874b23f72baba6565555819e4e82953b61fde321ff4ee9ab8da92a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:12:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:12:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e7a7c86bc4874b23f72baba6565555819e4e82953b61fde321ff4ee9ab8da92a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6cfcb0e4da9f1aca6c1eb570cd489ae0742a0b0b67deb79718138d6fa8d25bcd"} {"level":"info","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7a7c86bc4874b23f72baba6565555819e4e82953b61fde321ff4ee9ab8da92a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cfcb0e4da9f1aca6c1eb570cd489ae0742a0b0b67deb79718138d6fa8d25bcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:12:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:12:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6cfcb0e4da9f1aca6c1eb570cd489ae0742a0b0b67deb79718138d6fa8d25bcd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cfcb0e4da9f1aca6c1eb570cd489ae0742a0b0b67deb79718138d6fa8d25bcd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7a7c86bc4874b23f72baba6565555819e4e82953b61fde321ff4ee9ab8da92a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:12:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:12:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7a7c86bc4874b23f72baba6565555819e4e82953b61fde321ff4ee9ab8da92a"} {"level":"info","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7a7c86bc4874b23f72baba6565555819e4e82953b61fde321ff4ee9ab8da92a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cfcb0e4da9f1aca6c1eb570cd489ae0742a0b0b67deb79718138d6fa8d25bcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:12:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:12:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cfcb0e4da9f1aca6c1eb570cd489ae0742a0b0b67deb79718138d6fa8d25bcd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7a7c86bc4874b23f72baba6565555819e4e82953b61fde321ff4ee9ab8da92a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:12:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:12:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e7a7c86bc4874b23f72baba6565555819e4e82953b61fde321ff4ee9ab8da92a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6cfcb0e4da9f1aca6c1eb570cd489ae0742a0b0b67deb79718138d6fa8d25bcd"} {"level":"info","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7a7c86bc4874b23f72baba6565555819e4e82953b61fde321ff4ee9ab8da92a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cfcb0e4da9f1aca6c1eb570cd489ae0742a0b0b67deb79718138d6fa8d25bcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:12:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:12:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6cfcb0e4da9f1aca6c1eb570cd489ae0742a0b0b67deb79718138d6fa8d25bcd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7a7c86bc4874b23f72baba6565555819e4e82953b61fde321ff4ee9ab8da92a"} {"level":"info","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cfcb0e4da9f1aca6c1eb570cd489ae0742a0b0b67deb79718138d6fa8d25bcd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7a7c86bc4874b23f72baba6565555819e4e82953b61fde321ff4ee9ab8da92a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cfcb0e4da9f1aca6c1eb570cd489ae0742a0b0b67deb79718138d6fa8d25bcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:12:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:12:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6cfcb0e4da9f1aca6c1eb570cd489ae0742a0b0b67deb79718138d6fa8d25bcd"} {"level":"info","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cfcb0e4da9f1aca6c1eb570cd489ae0742a0b0b67deb79718138d6fa8d25bcd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cfcb0e4da9f1aca6c1eb570cd489ae0742a0b0b67deb79718138d6fa8d25bcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:12:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:12:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6cfcb0e4da9f1aca6c1eb570cd489ae0742a0b0b67deb79718138d6fa8d25bcd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7a7c86bc4874b23f72baba6565555819e4e82953b61fde321ff4ee9ab8da92a"} {"level":"info","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6cfcb0e4da9f1aca6c1eb570cd489ae0742a0b0b67deb79718138d6fa8d25bcd"} {"level":"info","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cfcb0e4da9f1aca6c1eb570cd489ae0742a0b0b67deb79718138d6fa8d25bcd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cfcb0e4da9f1aca6c1eb570cd489ae0742a0b0b67deb79718138d6fa8d25bcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:12:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:12:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6cfcb0e4da9f1aca6c1eb570cd489ae0742a0b0b67deb79718138d6fa8d25bcd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6cfcb0e4da9f1aca6c1eb570cd489ae0742a0b0b67deb79718138d6fa8d25bcd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6cfcb0e4da9f1aca6c1eb570cd489ae0742a0b0b67deb79718138d6fa8d25bcd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cfcb0e4da9f1aca6c1eb570cd489ae0742a0b0b67deb79718138d6fa8d25bcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:12:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:12:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6cfcb0e4da9f1aca6c1eb570cd489ae0742a0b0b67deb79718138d6fa8d25bcd"} {"level":"info","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c093841747c8e65349beff3a8bc4a83ac5c1b41e87a1bfda733abb25c8932103"} {"level":"info","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cfcb0e4da9f1aca6c1eb570cd489ae0742a0b0b67deb79718138d6fa8d25bcd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c093841747c8e65349beff3a8bc4a83ac5c1b41e87a1bfda733abb25c8932103","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:12:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:12:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c093841747c8e65349beff3a8bc4a83ac5c1b41e87a1bfda733abb25c8932103"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6cfcb0e4da9f1aca6c1eb570cd489ae0742a0b0b67deb79718138d6fa8d25bcd"} {"level":"info","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c093841747c8e65349beff3a8bc4a83ac5c1b41e87a1bfda733abb25c8932103","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cfcb0e4da9f1aca6c1eb570cd489ae0742a0b0b67deb79718138d6fa8d25bcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:12:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:12:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6cfcb0e4da9f1aca6c1eb570cd489ae0742a0b0b67deb79718138d6fa8d25bcd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c093841747c8e65349beff3a8bc4a83ac5c1b41e87a1bfda733abb25c8932103"} {"level":"info","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cfcb0e4da9f1aca6c1eb570cd489ae0742a0b0b67deb79718138d6fa8d25bcd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c093841747c8e65349beff3a8bc4a83ac5c1b41e87a1bfda733abb25c8932103","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21de4757405eb07c31a7299473bb8ab69e9094b5d0d26d56925154325a016cad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:12:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:12:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21de4757405eb07c31a7299473bb8ab69e9094b5d0d26d56925154325a016cad"} {"level":"info","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21de4757405eb07c31a7299473bb8ab69e9094b5d0d26d56925154325a016cad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cfcb0e4da9f1aca6c1eb570cd489ae0742a0b0b67deb79718138d6fa8d25bcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:12:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:12:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6cfcb0e4da9f1aca6c1eb570cd489ae0742a0b0b67deb79718138d6fa8d25bcd"} {"level":"info","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cfcb0e4da9f1aca6c1eb570cd489ae0742a0b0b67deb79718138d6fa8d25bcd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21de4757405eb07c31a7299473bb8ab69e9094b5d0d26d56925154325a016cad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cfcb0e4da9f1aca6c1eb570cd489ae0742a0b0b67deb79718138d6fa8d25bcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:12:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:12:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6cfcb0e4da9f1aca6c1eb570cd489ae0742a0b0b67deb79718138d6fa8d25bcd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cfcb0e4da9f1aca6c1eb570cd489ae0742a0b0b67deb79718138d6fa8d25bcd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21de4757405eb07c31a7299473bb8ab69e9094b5d0d26d56925154325a016cad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cfcb0e4da9f1aca6c1eb570cd489ae0742a0b0b67deb79718138d6fa8d25bcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:12:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:12:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6cfcb0e4da9f1aca6c1eb570cd489ae0742a0b0b67deb79718138d6fa8d25bcd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21de4757405eb07c31a7299473bb8ab69e9094b5d0d26d56925154325a016cad"} {"level":"error","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6cfcb0e4da9f1aca6c1eb570cd489ae0742a0b0b67deb79718138d6fa8d25bcd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6cfcb0e4da9f1aca6c1eb570cd489ae0742a0b0b67deb79718138d6fa8d25bcd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cfcb0e4da9f1aca6c1eb570cd489ae0742a0b0b67deb79718138d6fa8d25bcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:12:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:12:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cfcb0e4da9f1aca6c1eb570cd489ae0742a0b0b67deb79718138d6fa8d25bcd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21de4757405eb07c31a7299473bb8ab69e9094b5d0d26d56925154325a016cad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:12:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:12:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["21de4757405eb07c31a7299473bb8ab69e9094b5d0d26d56925154325a016cad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6cfcb0e4da9f1aca6c1eb570cd489ae0742a0b0b67deb79718138d6fa8d25bcd"} {"level":"info","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21de4757405eb07c31a7299473bb8ab69e9094b5d0d26d56925154325a016cad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cfcb0e4da9f1aca6c1eb570cd489ae0742a0b0b67deb79718138d6fa8d25bcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:12:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:12:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6cfcb0e4da9f1aca6c1eb570cd489ae0742a0b0b67deb79718138d6fa8d25bcd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cfcb0e4da9f1aca6c1eb570cd489ae0742a0b0b67deb79718138d6fa8d25bcd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"975f93442ec5bfdefecad12699d51891cc13c915c683de9658c08749c672054b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:12:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:12:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/975f93442ec5bfdefecad12699d51891cc13c915c683de9658c08749c672054b"} {"level":"info","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"975f93442ec5bfdefecad12699d51891cc13c915c683de9658c08749c672054b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21de4757405eb07c31a7299473bb8ab69e9094b5d0d26d56925154325a016cad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cfcb0e4da9f1aca6c1eb570cd489ae0742a0b0b67deb79718138d6fa8d25bcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:12:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:12:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6cfcb0e4da9f1aca6c1eb570cd489ae0742a0b0b67deb79718138d6fa8d25bcd"} {"level":"info","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cfcb0e4da9f1aca6c1eb570cd489ae0742a0b0b67deb79718138d6fa8d25bcd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"975f93442ec5bfdefecad12699d51891cc13c915c683de9658c08749c672054b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:12:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:12:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["975f93442ec5bfdefecad12699d51891cc13c915c683de9658c08749c672054b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"975f93442ec5bfdefecad12699d51891cc13c915c683de9658c08749c672054b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cfcb0e4da9f1aca6c1eb570cd489ae0742a0b0b67deb79718138d6fa8d25bcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:12:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:12:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6cfcb0e4da9f1aca6c1eb570cd489ae0742a0b0b67deb79718138d6fa8d25bcd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21de4757405eb07c31a7299473bb8ab69e9094b5d0d26d56925154325a016cad"} {"level":"info","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cfcb0e4da9f1aca6c1eb570cd489ae0742a0b0b67deb79718138d6fa8d25bcd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"975f93442ec5bfdefecad12699d51891cc13c915c683de9658c08749c672054b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:12:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:12:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/975f93442ec5bfdefecad12699d51891cc13c915c683de9658c08749c672054b"} {"level":"info","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"975f93442ec5bfdefecad12699d51891cc13c915c683de9658c08749c672054b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cfcb0e4da9f1aca6c1eb570cd489ae0742a0b0b67deb79718138d6fa8d25bcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:12:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:12:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6cfcb0e4da9f1aca6c1eb570cd489ae0742a0b0b67deb79718138d6fa8d25bcd"} {"level":"info","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cfcb0e4da9f1aca6c1eb570cd489ae0742a0b0b67deb79718138d6fa8d25bcd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59bc7ced2511471c30670d18773bbc47b3cbd3cb5acd73b7bf9b56d7b5028aee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:12:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:12:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59bc7ced2511471c30670d18773bbc47b3cbd3cb5acd73b7bf9b56d7b5028aee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"975f93442ec5bfdefecad12699d51891cc13c915c683de9658c08749c672054b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:12:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:12:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["975f93442ec5bfdefecad12699d51891cc13c915c683de9658c08749c672054b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59bc7ced2511471c30670d18773bbc47b3cbd3cb5acd73b7bf9b56d7b5028aee"} {"level":"info","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"975f93442ec5bfdefecad12699d51891cc13c915c683de9658c08749c672054b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cfcb0e4da9f1aca6c1eb570cd489ae0742a0b0b67deb79718138d6fa8d25bcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:12:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:12:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6cfcb0e4da9f1aca6c1eb570cd489ae0742a0b0b67deb79718138d6fa8d25bcd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/975f93442ec5bfdefecad12699d51891cc13c915c683de9658c08749c672054b"} {"level":"info","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cfcb0e4da9f1aca6c1eb570cd489ae0742a0b0b67deb79718138d6fa8d25bcd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59bc7ced2511471c30670d18773bbc47b3cbd3cb5acd73b7bf9b56d7b5028aee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:12:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:12:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["59bc7ced2511471c30670d18773bbc47b3cbd3cb5acd73b7bf9b56d7b5028aee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59bc7ced2511471c30670d18773bbc47b3cbd3cb5acd73b7bf9b56d7b5028aee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"975f93442ec5bfdefecad12699d51891cc13c915c683de9658c08749c672054b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cfcb0e4da9f1aca6c1eb570cd489ae0742a0b0b67deb79718138d6fa8d25bcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:12:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:12:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cfcb0e4da9f1aca6c1eb570cd489ae0742a0b0b67deb79718138d6fa8d25bcd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59bc7ced2511471c30670d18773bbc47b3cbd3cb5acd73b7bf9b56d7b5028aee","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6cfcb0e4da9f1aca6c1eb570cd489ae0742a0b0b67deb79718138d6fa8d25bcd"} {"level":"debug","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cfcb0e4da9f1aca6c1eb570cd489ae0742a0b0b67deb79718138d6fa8d25bcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:12:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:12:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6cfcb0e4da9f1aca6c1eb570cd489ae0742a0b0b67deb79718138d6fa8d25bcd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cfcb0e4da9f1aca6c1eb570cd489ae0742a0b0b67deb79718138d6fa8d25bcd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cfcb0e4da9f1aca6c1eb570cd489ae0742a0b0b67deb79718138d6fa8d25bcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:12:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:12:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6cfcb0e4da9f1aca6c1eb570cd489ae0742a0b0b67deb79718138d6fa8d25bcd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6cfcb0e4da9f1aca6c1eb570cd489ae0742a0b0b67deb79718138d6fa8d25bcd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6cfcb0e4da9f1aca6c1eb570cd489ae0742a0b0b67deb79718138d6fa8d25bcd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6cfcb0e4da9f1aca6c1eb570cd489ae0742a0b0b67deb79718138d6fa8d25bcd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6cfcb0e4da9f1aca6c1eb570cd489ae0742a0b0b67deb79718138d6fa8d25bcd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59bc7ced2511471c30670d18773bbc47b3cbd3cb5acd73b7bf9b56d7b5028aee"} {"level":"info","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/975f93442ec5bfdefecad12699d51891cc13c915c683de9658c08749c672054b"} {"level":"debug","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc4bfd5e728d5b17a74fd5b336d966f9da4c2d95637da1b03efa97b47a4cb8b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:12:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:12:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6cfcb0e4da9f1aca6c1eb570cd489ae0742a0b0b67deb79718138d6fa8d25bcd"} {"level":"info","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc4bfd5e728d5b17a74fd5b336d966f9da4c2d95637da1b03efa97b47a4cb8b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc4bfd5e728d5b17a74fd5b336d966f9da4c2d95637da1b03efa97b47a4cb8b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:12:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:12:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc4bfd5e728d5b17a74fd5b336d966f9da4c2d95637da1b03efa97b47a4cb8b2"} {"level":"info","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc4bfd5e728d5b17a74fd5b336d966f9da4c2d95637da1b03efa97b47a4cb8b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc4bfd5e728d5b17a74fd5b336d966f9da4c2d95637da1b03efa97b47a4cb8b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:12:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:12:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc4bfd5e728d5b17a74fd5b336d966f9da4c2d95637da1b03efa97b47a4cb8b2"} {"level":"info","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc4bfd5e728d5b17a74fd5b336d966f9da4c2d95637da1b03efa97b47a4cb8b2"} {"level":"error","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cc4bfd5e728d5b17a74fd5b336d966f9da4c2d95637da1b03efa97b47a4cb8b2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cc4bfd5e728d5b17a74fd5b336d966f9da4c2d95637da1b03efa97b47a4cb8b2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc4bfd5e728d5b17a74fd5b336d966f9da4c2d95637da1b03efa97b47a4cb8b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:12:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:12:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc4bfd5e728d5b17a74fd5b336d966f9da4c2d95637da1b03efa97b47a4cb8b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc4bfd5e728d5b17a74fd5b336d966f9da4c2d95637da1b03efa97b47a4cb8b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc4bfd5e728d5b17a74fd5b336d966f9da4c2d95637da1b03efa97b47a4cb8b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:12:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:12:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc4bfd5e728d5b17a74fd5b336d966f9da4c2d95637da1b03efa97b47a4cb8b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc4bfd5e728d5b17a74fd5b336d966f9da4c2d95637da1b03efa97b47a4cb8b2"} {"level":"error","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cc4bfd5e728d5b17a74fd5b336d966f9da4c2d95637da1b03efa97b47a4cb8b2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cc4bfd5e728d5b17a74fd5b336d966f9da4c2d95637da1b03efa97b47a4cb8b2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc4bfd5e728d5b17a74fd5b336d966f9da4c2d95637da1b03efa97b47a4cb8b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc4bfd5e728d5b17a74fd5b336d966f9da4c2d95637da1b03efa97b47a4cb8b2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:13:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"498e004d-8504-4d5d-b753-98ccad9abb04","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:51794","PortSpecifier":{"PortValue":51794}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"498e004d-8504-4d5d-b753-98ccad9abb04","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-01037d.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T21:13:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"498e004d-8504-4d5d-b753-98ccad9abb04","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:51794","PortSpecifier":{"PortValue":51794}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783717981,"nanos":533672751},"http":{"id":"498e004d-8504-4d5d-b753-98ccad9abb04","method":"POST","headers":{":authority":"e2e-shared-a-01037d.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:13:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"498e004d-8504-4d5d-b753-98ccad9abb04","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T21:13:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"498e004d-8504-4d5d-b753-98ccad9abb04","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5c8ab2d5-ac60-492f-9b62-36f585e148c2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f392fc79-4b6b-4571-a559-64ef3c7b3566"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2f28d6eab427"]}} {"level":"debug","ts":"2026-07-10T21:13:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"498e004d-8504-4d5d-b753-98ccad9abb04","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2f28d6eab427"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f392fc79-4b6b-4571-a559-64ef3c7b3566"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5c8ab2d5-ac60-492f-9b62-36f585e148c2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8eee558a6e1b3624d4065fc7008e112d07d12000aeba9ec4e0bbb69202e0afe6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-01037d.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:13:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"498e004d-8504-4d5d-b753-98ccad9abb04","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:13:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"498e004d-8504-4d5d-b753-98ccad9abb04","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:13:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"498e004d-8504-4d5d-b753-98ccad9abb04","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-01037d/auth-test-model-01037d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:13:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"498e004d-8504-4d5d-b753-98ccad9abb04","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T21:13:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"498e004d-8504-4d5d-b753-98ccad9abb04","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T21:13:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"498e004d-8504-4d5d-b753-98ccad9abb04","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T21:13:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"498e004d-8504-4d5d-b753-98ccad9abb04","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T21:13:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"498e004d-8504-4d5d-b753-98ccad9abb04","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T21:13:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bf382e63-6b87-471d-ae2c-d3d8c3ab3eb9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:38684","PortSpecifier":{"PortValue":38684}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bf382e63-6b87-471d-ae2c-d3d8c3ab3eb9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e63f46.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T21:13:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bf382e63-6b87-471d-ae2c-d3d8c3ab3eb9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:38684","PortSpecifier":{"PortValue":38684}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783717981,"nanos":591345593},"http":{"id":"bf382e63-6b87-471d-ae2c-d3d8c3ab3eb9","method":"POST","headers":{":authority":"e2e-shared-b-e63f46.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:13:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bf382e63-6b87-471d-ae2c-d3d8c3ab3eb9","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T21:13:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bf382e63-6b87-471d-ae2c-d3d8c3ab3eb9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5c8ab2d5-ac60-492f-9b62-36f585e148c2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f392fc79-4b6b-4571-a559-64ef3c7b3566"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2f28d6eab427"]}} {"level":"debug","ts":"2026-07-10T21:13:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bf382e63-6b87-471d-ae2c-d3d8c3ab3eb9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2f28d6eab427"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f392fc79-4b6b-4571-a559-64ef3c7b3566"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5c8ab2d5-ac60-492f-9b62-36f585e148c2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"57dea3d8fd23cd690dfb4e4e7f2713bd6b43347e494ed9c3a93295c590e4c985"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e63f46.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:13:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf382e63-6b87-471d-ae2c-d3d8c3ab3eb9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:13:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf382e63-6b87-471d-ae2c-d3d8c3ab3eb9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:13:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf382e63-6b87-471d-ae2c-d3d8c3ab3eb9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e63f46/auth-test-model-e63f46\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:13:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bf382e63-6b87-471d-ae2c-d3d8c3ab3eb9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T21:13:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf382e63-6b87-471d-ae2c-d3d8c3ab3eb9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T21:13:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf382e63-6b87-471d-ae2c-d3d8c3ab3eb9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T21:13:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bf382e63-6b87-471d-ae2c-d3d8c3ab3eb9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T21:13:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bf382e63-6b87-471d-ae2c-d3d8c3ab3eb9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T21:13:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d371c534-afb8-4b58-8630-64590f77440a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:51804","PortSpecifier":{"PortValue":51804}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d371c534-afb8-4b58-8630-64590f77440a","method":"GET","path":"/maas-api/v1/api-keys/c5b54edd-1059-468e-ac54-1189e0ea7df8","host":"e2e-shared-a-01037d.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T21:13:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d371c534-afb8-4b58-8630-64590f77440a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:51804","PortSpecifier":{"PortValue":51804}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783717981,"nanos":653803228},"http":{"id":"d371c534-afb8-4b58-8630-64590f77440a","method":"GET","headers":{":authority":"e2e-shared-a-01037d.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c5b54edd-1059-468e-ac54-1189e0ea7df8",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:13:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d371c534-afb8-4b58-8630-64590f77440a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T21:13:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d371c534-afb8-4b58-8630-64590f77440a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5c8ab2d5-ac60-492f-9b62-36f585e148c2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f392fc79-4b6b-4571-a559-64ef3c7b3566"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2f28d6eab427"]}} {"level":"debug","ts":"2026-07-10T21:13:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d371c534-afb8-4b58-8630-64590f77440a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2f28d6eab427"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f392fc79-4b6b-4571-a559-64ef3c7b3566"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5c8ab2d5-ac60-492f-9b62-36f585e148c2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8eee558a6e1b3624d4065fc7008e112d07d12000aeba9ec4e0bbb69202e0afe6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-01037d.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c5b54edd-1059-468e-ac54-1189e0ea7df8",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:13:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d371c534-afb8-4b58-8630-64590f77440a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:13:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d371c534-afb8-4b58-8630-64590f77440a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:13:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d371c534-afb8-4b58-8630-64590f77440a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-01037d/auth-test-model-01037d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:13:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d371c534-afb8-4b58-8630-64590f77440a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T21:13:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d371c534-afb8-4b58-8630-64590f77440a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T21:13:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d371c534-afb8-4b58-8630-64590f77440a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T21:13:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d371c534-afb8-4b58-8630-64590f77440a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T21:13:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d371c534-afb8-4b58-8630-64590f77440a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T21:13:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4baabbce-9bc0-4d0a-b174-546e916ef0ae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:38688","PortSpecifier":{"PortValue":38688}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4baabbce-9bc0-4d0a-b174-546e916ef0ae","method":"GET","path":"/maas-api/v1/api-keys/71e7b938-7b5d-4eff-9d44-0fa0f4d51c99","host":"e2e-shared-b-e63f46.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T21:13:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4baabbce-9bc0-4d0a-b174-546e916ef0ae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:38688","PortSpecifier":{"PortValue":38688}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783717981,"nanos":696028300},"http":{"id":"4baabbce-9bc0-4d0a-b174-546e916ef0ae","method":"GET","headers":{":authority":"e2e-shared-b-e63f46.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/71e7b938-7b5d-4eff-9d44-0fa0f4d51c99",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:13:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4baabbce-9bc0-4d0a-b174-546e916ef0ae","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T21:13:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4baabbce-9bc0-4d0a-b174-546e916ef0ae","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5c8ab2d5-ac60-492f-9b62-36f585e148c2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f392fc79-4b6b-4571-a559-64ef3c7b3566"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2f28d6eab427"]}} {"level":"debug","ts":"2026-07-10T21:13:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4baabbce-9bc0-4d0a-b174-546e916ef0ae","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2f28d6eab427"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f392fc79-4b6b-4571-a559-64ef3c7b3566"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5c8ab2d5-ac60-492f-9b62-36f585e148c2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"57dea3d8fd23cd690dfb4e4e7f2713bd6b43347e494ed9c3a93295c590e4c985"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e63f46.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/71e7b938-7b5d-4eff-9d44-0fa0f4d51c99",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:13:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4baabbce-9bc0-4d0a-b174-546e916ef0ae","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:13:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4baabbce-9bc0-4d0a-b174-546e916ef0ae","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:13:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4baabbce-9bc0-4d0a-b174-546e916ef0ae","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e63f46/auth-test-model-e63f46\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:13:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4baabbce-9bc0-4d0a-b174-546e916ef0ae","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T21:13:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4baabbce-9bc0-4d0a-b174-546e916ef0ae","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T21:13:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4baabbce-9bc0-4d0a-b174-546e916ef0ae","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T21:13:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4baabbce-9bc0-4d0a-b174-546e916ef0ae","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T21:13:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4baabbce-9bc0-4d0a-b174-546e916ef0ae","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T21:13:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"338d09de-de2b-414c-9426-18527c2ed478","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:55890","PortSpecifier":{"PortValue":55890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"338d09de-de2b-414c-9426-18527c2ed478","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-01037d.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T21:13:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"338d09de-de2b-414c-9426-18527c2ed478","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:55890","PortSpecifier":{"PortValue":55890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783717998,"nanos":820968545},"http":{"id":"338d09de-de2b-414c-9426-18527c2ed478","method":"POST","headers":{":authority":"e2e-shared-a-01037d.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:13:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"338d09de-de2b-414c-9426-18527c2ed478","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T21:13:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"338d09de-de2b-414c-9426-18527c2ed478","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5c8ab2d5-ac60-492f-9b62-36f585e148c2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f392fc79-4b6b-4571-a559-64ef3c7b3566"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2f28d6eab427"]}} {"level":"debug","ts":"2026-07-10T21:13:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"338d09de-de2b-414c-9426-18527c2ed478","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2f28d6eab427"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f392fc79-4b6b-4571-a559-64ef3c7b3566"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5c8ab2d5-ac60-492f-9b62-36f585e148c2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8eee558a6e1b3624d4065fc7008e112d07d12000aeba9ec4e0bbb69202e0afe6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-01037d.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:13:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"338d09de-de2b-414c-9426-18527c2ed478","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:13:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"338d09de-de2b-414c-9426-18527c2ed478","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:13:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"338d09de-de2b-414c-9426-18527c2ed478","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-01037d/auth-test-model-01037d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:13:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"338d09de-de2b-414c-9426-18527c2ed478","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T21:13:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"338d09de-de2b-414c-9426-18527c2ed478","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T21:13:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"338d09de-de2b-414c-9426-18527c2ed478","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T21:13:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"338d09de-de2b-414c-9426-18527c2ed478","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T21:13:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"338d09de-de2b-414c-9426-18527c2ed478","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T21:13:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9cd17987-7ea0-4d2f-9091-b4fb58f254a4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:40028","PortSpecifier":{"PortValue":40028}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9cd17987-7ea0-4d2f-9091-b4fb58f254a4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e63f46.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T21:13:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9cd17987-7ea0-4d2f-9091-b4fb58f254a4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:40028","PortSpecifier":{"PortValue":40028}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783717998,"nanos":855610120},"http":{"id":"9cd17987-7ea0-4d2f-9091-b4fb58f254a4","method":"POST","headers":{":authority":"e2e-shared-b-e63f46.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:13:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9cd17987-7ea0-4d2f-9091-b4fb58f254a4","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T21:13:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9cd17987-7ea0-4d2f-9091-b4fb58f254a4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5c8ab2d5-ac60-492f-9b62-36f585e148c2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f392fc79-4b6b-4571-a559-64ef3c7b3566"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2f28d6eab427"]}} {"level":"debug","ts":"2026-07-10T21:13:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9cd17987-7ea0-4d2f-9091-b4fb58f254a4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2f28d6eab427"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f392fc79-4b6b-4571-a559-64ef3c7b3566"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5c8ab2d5-ac60-492f-9b62-36f585e148c2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"57dea3d8fd23cd690dfb4e4e7f2713bd6b43347e494ed9c3a93295c590e4c985"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e63f46.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:13:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9cd17987-7ea0-4d2f-9091-b4fb58f254a4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:13:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9cd17987-7ea0-4d2f-9091-b4fb58f254a4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:13:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9cd17987-7ea0-4d2f-9091-b4fb58f254a4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e63f46/auth-test-model-e63f46\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:13:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9cd17987-7ea0-4d2f-9091-b4fb58f254a4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T21:13:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9cd17987-7ea0-4d2f-9091-b4fb58f254a4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T21:13:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9cd17987-7ea0-4d2f-9091-b4fb58f254a4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-10T21:13:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9cd17987-7ea0-4d2f-9091-b4fb58f254a4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T21:13:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9cd17987-7ea0-4d2f-9091-b4fb58f254a4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T21:13:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"69062111-f3db-45ae-b3ed-051e75cad7a0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:55892","PortSpecifier":{"PortValue":55892}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"69062111-f3db-45ae-b3ed-051e75cad7a0","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-01037d.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T21:13:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"69062111-f3db-45ae-b3ed-051e75cad7a0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:55892","PortSpecifier":{"PortValue":55892}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783717998,"nanos":890526456},"http":{"id":"69062111-f3db-45ae-b3ed-051e75cad7a0","method":"GET","headers":{":authority":"e2e-shared-a-01037d.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:13:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"69062111-f3db-45ae-b3ed-051e75cad7a0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-aAxwJLzesRmH4RSN_eZAVtrpMcUZxYVcoDZXf7wPUJPwcYZKzKcoZTnrAuNE"} {"level":"debug","ts":"2026-07-10T21:13:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"69062111-f3db-45ae-b3ed-051e75cad7a0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-01037d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-aAxwJLzesRmH4RSN_eZAVtrpMcUZxYVcoDZXf7wPUJPwcYZKzKcoZTnrAuNE\"}"} {"level":"debug","ts":"2026-07-10T21:13:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"69062111-f3db-45ae-b3ed-051e75cad7a0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-01037d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"bd7ed22e-71bc-4eaa-a2dd-2102d6198dd1","keyName":"e2e-auth-iso-a-879371","subscription":"e2e-auth-iso-9b97cf","tenant":"e2e-shared-a-01037d","userId":"bd7ed22e-71bc-4eaa-a2dd-2102d6198dd1","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T21:13:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"69062111-f3db-45ae-b3ed-051e75cad7a0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:13:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69062111-f3db-45ae-b3ed-051e75cad7a0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:13:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69062111-f3db-45ae-b3ed-051e75cad7a0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:13:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69062111-f3db-45ae-b3ed-051e75cad7a0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-01037d/auth-test-model-01037d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:13:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"69062111-f3db-45ae-b3ed-051e75cad7a0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-10T21:13:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"69062111-f3db-45ae-b3ed-051e75cad7a0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T21:13:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"69062111-f3db-45ae-b3ed-051e75cad7a0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-9b97cf"} {"level":"debug","ts":"2026-07-10T21:13:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"69062111-f3db-45ae-b3ed-051e75cad7a0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T21:13:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"69062111-f3db-45ae-b3ed-051e75cad7a0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T21:13:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"69062111-f3db-45ae-b3ed-051e75cad7a0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T21:13:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e7e8c518-bd2d-44c0-b2c0-c6904a66d63b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:51088","PortSpecifier":{"PortValue":51088}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e7e8c518-bd2d-44c0-b2c0-c6904a66d63b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-01037d.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T21:13:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e7e8c518-bd2d-44c0-b2c0-c6904a66d63b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:51088","PortSpecifier":{"PortValue":51088}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783718018,"nanos":446570669},"http":{"id":"e7e8c518-bd2d-44c0-b2c0-c6904a66d63b","method":"POST","headers":{":authority":"e2e-shared-a-01037d.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:13:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e7e8c518-bd2d-44c0-b2c0-c6904a66d63b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T21:13:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e7e8c518-bd2d-44c0-b2c0-c6904a66d63b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5c8ab2d5-ac60-492f-9b62-36f585e148c2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f392fc79-4b6b-4571-a559-64ef3c7b3566"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2f28d6eab427"]}} {"level":"debug","ts":"2026-07-10T21:13:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e7e8c518-bd2d-44c0-b2c0-c6904a66d63b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2f28d6eab427"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f392fc79-4b6b-4571-a559-64ef3c7b3566"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5c8ab2d5-ac60-492f-9b62-36f585e148c2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8eee558a6e1b3624d4065fc7008e112d07d12000aeba9ec4e0bbb69202e0afe6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-01037d.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:13:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7e8c518-bd2d-44c0-b2c0-c6904a66d63b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:13:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7e8c518-bd2d-44c0-b2c0-c6904a66d63b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:13:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7e8c518-bd2d-44c0-b2c0-c6904a66d63b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-01037d/auth-test-model-01037d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:13:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e7e8c518-bd2d-44c0-b2c0-c6904a66d63b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T21:13:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7e8c518-bd2d-44c0-b2c0-c6904a66d63b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T21:13:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7e8c518-bd2d-44c0-b2c0-c6904a66d63b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T21:13:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e7e8c518-bd2d-44c0-b2c0-c6904a66d63b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T21:13:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e7e8c518-bd2d-44c0-b2c0-c6904a66d63b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T21:13:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aa769583-4fcf-4609-baba-748c7a0caf92","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:40304","PortSpecifier":{"PortValue":40304}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"aa769583-4fcf-4609-baba-748c7a0caf92","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e63f46.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T21:13:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aa769583-4fcf-4609-baba-748c7a0caf92","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:40304","PortSpecifier":{"PortValue":40304}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783718018,"nanos":483321350},"http":{"id":"aa769583-4fcf-4609-baba-748c7a0caf92","method":"POST","headers":{":authority":"e2e-shared-b-e63f46.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:13:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"aa769583-4fcf-4609-baba-748c7a0caf92","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T21:13:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"aa769583-4fcf-4609-baba-748c7a0caf92","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5c8ab2d5-ac60-492f-9b62-36f585e148c2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f392fc79-4b6b-4571-a559-64ef3c7b3566"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2f28d6eab427"]}} {"level":"debug","ts":"2026-07-10T21:13:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"aa769583-4fcf-4609-baba-748c7a0caf92","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2f28d6eab427"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f392fc79-4b6b-4571-a559-64ef3c7b3566"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5c8ab2d5-ac60-492f-9b62-36f585e148c2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"57dea3d8fd23cd690dfb4e4e7f2713bd6b43347e494ed9c3a93295c590e4c985"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e63f46.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:13:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aa769583-4fcf-4609-baba-748c7a0caf92","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:13:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aa769583-4fcf-4609-baba-748c7a0caf92","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:13:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aa769583-4fcf-4609-baba-748c7a0caf92","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e63f46/auth-test-model-e63f46\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:13:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"aa769583-4fcf-4609-baba-748c7a0caf92","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T21:13:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aa769583-4fcf-4609-baba-748c7a0caf92","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T21:13:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aa769583-4fcf-4609-baba-748c7a0caf92","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T21:13:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aa769583-4fcf-4609-baba-748c7a0caf92","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T21:13:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aa769583-4fcf-4609-baba-748c7a0caf92","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T21:13:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eea50b1a-6597-4d4c-944a-e0f54a0d1f86","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:40316","PortSpecifier":{"PortValue":40316}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"eea50b1a-6597-4d4c-944a-e0f54a0d1f86","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-e63f46.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T21:13:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eea50b1a-6597-4d4c-944a-e0f54a0d1f86","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:40316","PortSpecifier":{"PortValue":40316}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783718018,"nanos":524237637},"http":{"id":"eea50b1a-6597-4d4c-944a-e0f54a0d1f86","method":"GET","headers":{":authority":"e2e-shared-b-e63f46.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:13:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"eea50b1a-6597-4d4c-944a-e0f54a0d1f86","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-VoYK1g3gIxGjlgFV_l3BgmZbsd7e2v1W0HdEFtFd0AhZMV7hSRraX3SzL2tO"} {"level":"debug","ts":"2026-07-10T21:13:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"eea50b1a-6597-4d4c-944a-e0f54a0d1f86","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-e63f46.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-VoYK1g3gIxGjlgFV_l3BgmZbsd7e2v1W0HdEFtFd0AhZMV7hSRraX3SzL2tO\"}"} {"level":"debug","ts":"2026-07-10T21:13:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"eea50b1a-6597-4d4c-944a-e0f54a0d1f86","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-e63f46.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-10T21:13:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"eea50b1a-6597-4d4c-944a-e0f54a0d1f86","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"57dea3d8fd23cd690dfb4e4e7f2713bd6b43347e494ed9c3a93295c590e4c985"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e63f46.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:13:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eea50b1a-6597-4d4c-944a-e0f54a0d1f86","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:13:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"eea50b1a-6597-4d4c-944a-e0f54a0d1f86","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-10T21:13:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eea50b1a-6597-4d4c-944a-e0f54a0d1f86","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-10T21:13:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eea50b1a-6597-4d4c-944a-e0f54a0d1f86","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-07-10T21:13:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6c4b3185-58b2-46c6-ae1a-ec2b1d7f5795","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:53026","PortSpecifier":{"PortValue":53026}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6c4b3185-58b2-46c6-ae1a-ec2b1d7f5795","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-01037d.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T21:13:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6c4b3185-58b2-46c6-ae1a-ec2b1d7f5795","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:53026","PortSpecifier":{"PortValue":53026}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783718035,"nanos":745150964},"http":{"id":"6c4b3185-58b2-46c6-ae1a-ec2b1d7f5795","method":"POST","headers":{":authority":"e2e-shared-a-01037d.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:13:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6c4b3185-58b2-46c6-ae1a-ec2b1d7f5795","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T21:13:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6c4b3185-58b2-46c6-ae1a-ec2b1d7f5795","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5c8ab2d5-ac60-492f-9b62-36f585e148c2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f392fc79-4b6b-4571-a559-64ef3c7b3566"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2f28d6eab427"]}} {"level":"debug","ts":"2026-07-10T21:13:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6c4b3185-58b2-46c6-ae1a-ec2b1d7f5795","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2f28d6eab427"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f392fc79-4b6b-4571-a559-64ef3c7b3566"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5c8ab2d5-ac60-492f-9b62-36f585e148c2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8eee558a6e1b3624d4065fc7008e112d07d12000aeba9ec4e0bbb69202e0afe6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-01037d.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:13:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c4b3185-58b2-46c6-ae1a-ec2b1d7f5795","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:13:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c4b3185-58b2-46c6-ae1a-ec2b1d7f5795","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:13:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c4b3185-58b2-46c6-ae1a-ec2b1d7f5795","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-01037d/auth-test-model-01037d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:13:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6c4b3185-58b2-46c6-ae1a-ec2b1d7f5795","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T21:13:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6c4b3185-58b2-46c6-ae1a-ec2b1d7f5795","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T21:13:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6c4b3185-58b2-46c6-ae1a-ec2b1d7f5795","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-10T21:13:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6c4b3185-58b2-46c6-ae1a-ec2b1d7f5795","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T21:13:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6c4b3185-58b2-46c6-ae1a-ec2b1d7f5795","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T21:13:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a2a04ae-f00c-42cb-819c-4f3c32393306","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:51126","PortSpecifier":{"PortValue":51126}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6a2a04ae-f00c-42cb-819c-4f3c32393306","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e63f46.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T21:13:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a2a04ae-f00c-42cb-819c-4f3c32393306","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:51126","PortSpecifier":{"PortValue":51126}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783718035,"nanos":777552858},"http":{"id":"6a2a04ae-f00c-42cb-819c-4f3c32393306","method":"POST","headers":{":authority":"e2e-shared-b-e63f46.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:13:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6a2a04ae-f00c-42cb-819c-4f3c32393306","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T21:13:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6a2a04ae-f00c-42cb-819c-4f3c32393306","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5c8ab2d5-ac60-492f-9b62-36f585e148c2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f392fc79-4b6b-4571-a559-64ef3c7b3566"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2f28d6eab427"]}} {"level":"debug","ts":"2026-07-10T21:13:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6a2a04ae-f00c-42cb-819c-4f3c32393306","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2f28d6eab427"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f392fc79-4b6b-4571-a559-64ef3c7b3566"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5c8ab2d5-ac60-492f-9b62-36f585e148c2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"57dea3d8fd23cd690dfb4e4e7f2713bd6b43347e494ed9c3a93295c590e4c985"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e63f46.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:13:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a2a04ae-f00c-42cb-819c-4f3c32393306","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:13:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a2a04ae-f00c-42cb-819c-4f3c32393306","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:13:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a2a04ae-f00c-42cb-819c-4f3c32393306","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e63f46/auth-test-model-e63f46\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:13:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6a2a04ae-f00c-42cb-819c-4f3c32393306","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T21:13:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a2a04ae-f00c-42cb-819c-4f3c32393306","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T21:13:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a2a04ae-f00c-42cb-819c-4f3c32393306","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-10T21:13:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a2a04ae-f00c-42cb-819c-4f3c32393306","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T21:13:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a2a04ae-f00c-42cb-819c-4f3c32393306","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T21:13:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"de2acbc3-eb25-47ee-9b7c-660083af2810","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:53028","PortSpecifier":{"PortValue":53028}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"de2acbc3-eb25-47ee-9b7c-660083af2810","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-01037d.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T21:13:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"de2acbc3-eb25-47ee-9b7c-660083af2810","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:53028","PortSpecifier":{"PortValue":53028}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783718035,"nanos":811630387},"http":{"id":"de2acbc3-eb25-47ee-9b7c-660083af2810","method":"POST","headers":{":authority":"e2e-shared-a-01037d.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:13:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"de2acbc3-eb25-47ee-9b7c-660083af2810","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T21:13:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"de2acbc3-eb25-47ee-9b7c-660083af2810","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5c8ab2d5-ac60-492f-9b62-36f585e148c2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f392fc79-4b6b-4571-a559-64ef3c7b3566"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2f28d6eab427"]}} {"level":"debug","ts":"2026-07-10T21:13:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"de2acbc3-eb25-47ee-9b7c-660083af2810","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2f28d6eab427"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f392fc79-4b6b-4571-a559-64ef3c7b3566"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5c8ab2d5-ac60-492f-9b62-36f585e148c2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8eee558a6e1b3624d4065fc7008e112d07d12000aeba9ec4e0bbb69202e0afe6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-01037d.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:13:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"de2acbc3-eb25-47ee-9b7c-660083af2810","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:13:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"de2acbc3-eb25-47ee-9b7c-660083af2810","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:13:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"de2acbc3-eb25-47ee-9b7c-660083af2810","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-01037d/auth-test-model-01037d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:13:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"de2acbc3-eb25-47ee-9b7c-660083af2810","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T21:13:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"de2acbc3-eb25-47ee-9b7c-660083af2810","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T21:13:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"de2acbc3-eb25-47ee-9b7c-660083af2810","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T21:13:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"de2acbc3-eb25-47ee-9b7c-660083af2810","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T21:13:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"de2acbc3-eb25-47ee-9b7c-660083af2810","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T21:13:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"be4b2434-72a1-4153-a00d-51c7280996a6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:51132","PortSpecifier":{"PortValue":51132}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"be4b2434-72a1-4153-a00d-51c7280996a6","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-e63f46.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T21:13:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"be4b2434-72a1-4153-a00d-51c7280996a6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:51132","PortSpecifier":{"PortValue":51132}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783718035,"nanos":843570277},"http":{"id":"be4b2434-72a1-4153-a00d-51c7280996a6","method":"POST","headers":{":authority":"e2e-shared-b-e63f46.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:13:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"be4b2434-72a1-4153-a00d-51c7280996a6","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T21:13:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"be4b2434-72a1-4153-a00d-51c7280996a6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5c8ab2d5-ac60-492f-9b62-36f585e148c2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f392fc79-4b6b-4571-a559-64ef3c7b3566"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2f28d6eab427"]}} {"level":"debug","ts":"2026-07-10T21:13:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"be4b2434-72a1-4153-a00d-51c7280996a6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2f28d6eab427"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f392fc79-4b6b-4571-a559-64ef3c7b3566"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5c8ab2d5-ac60-492f-9b62-36f585e148c2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"57dea3d8fd23cd690dfb4e4e7f2713bd6b43347e494ed9c3a93295c590e4c985"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e63f46.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:13:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be4b2434-72a1-4153-a00d-51c7280996a6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:13:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be4b2434-72a1-4153-a00d-51c7280996a6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:13:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be4b2434-72a1-4153-a00d-51c7280996a6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e63f46/auth-test-model-e63f46\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:13:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"be4b2434-72a1-4153-a00d-51c7280996a6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T21:13:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be4b2434-72a1-4153-a00d-51c7280996a6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T21:13:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be4b2434-72a1-4153-a00d-51c7280996a6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T21:13:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"be4b2434-72a1-4153-a00d-51c7280996a6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T21:13:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"be4b2434-72a1-4153-a00d-51c7280996a6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T21:14:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"97fbb4f1-4c23-4f94-85fe-4d8b5ce2f5f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:37990","PortSpecifier":{"PortValue":37990}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"97fbb4f1-4c23-4f94-85fe-4d8b5ce2f5f2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-01037d.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T21:14:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"97fbb4f1-4c23-4f94-85fe-4d8b5ce2f5f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:37990","PortSpecifier":{"PortValue":37990}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783718052,"nanos":954116865},"http":{"id":"97fbb4f1-4c23-4f94-85fe-4d8b5ce2f5f2","method":"POST","headers":{":authority":"e2e-shared-a-01037d.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:14:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"97fbb4f1-4c23-4f94-85fe-4d8b5ce2f5f2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T21:14:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"97fbb4f1-4c23-4f94-85fe-4d8b5ce2f5f2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5c8ab2d5-ac60-492f-9b62-36f585e148c2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f392fc79-4b6b-4571-a559-64ef3c7b3566"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2f28d6eab427"]}} {"level":"debug","ts":"2026-07-10T21:14:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"97fbb4f1-4c23-4f94-85fe-4d8b5ce2f5f2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2f28d6eab427"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f392fc79-4b6b-4571-a559-64ef3c7b3566"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5c8ab2d5-ac60-492f-9b62-36f585e148c2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8eee558a6e1b3624d4065fc7008e112d07d12000aeba9ec4e0bbb69202e0afe6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-01037d.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:14:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97fbb4f1-4c23-4f94-85fe-4d8b5ce2f5f2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:14:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97fbb4f1-4c23-4f94-85fe-4d8b5ce2f5f2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:14:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97fbb4f1-4c23-4f94-85fe-4d8b5ce2f5f2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-01037d/auth-test-model-01037d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:14:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"97fbb4f1-4c23-4f94-85fe-4d8b5ce2f5f2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T21:14:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97fbb4f1-4c23-4f94-85fe-4d8b5ce2f5f2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T21:14:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97fbb4f1-4c23-4f94-85fe-4d8b5ce2f5f2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-10T21:14:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"97fbb4f1-4c23-4f94-85fe-4d8b5ce2f5f2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T21:14:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"97fbb4f1-4c23-4f94-85fe-4d8b5ce2f5f2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T21:14:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c0e49766-8b97-446f-b201-a85cf2b0ba70","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:58874","PortSpecifier":{"PortValue":58874}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c0e49766-8b97-446f-b201-a85cf2b0ba70","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e63f46.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T21:14:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c0e49766-8b97-446f-b201-a85cf2b0ba70","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:58874","PortSpecifier":{"PortValue":58874}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783718052,"nanos":992411907},"http":{"id":"c0e49766-8b97-446f-b201-a85cf2b0ba70","method":"POST","headers":{":authority":"e2e-shared-b-e63f46.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:14:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c0e49766-8b97-446f-b201-a85cf2b0ba70","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T21:14:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c0e49766-8b97-446f-b201-a85cf2b0ba70","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5c8ab2d5-ac60-492f-9b62-36f585e148c2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f392fc79-4b6b-4571-a559-64ef3c7b3566"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2f28d6eab427"]}} {"level":"debug","ts":"2026-07-10T21:14:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c0e49766-8b97-446f-b201-a85cf2b0ba70","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2f28d6eab427"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f392fc79-4b6b-4571-a559-64ef3c7b3566"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5c8ab2d5-ac60-492f-9b62-36f585e148c2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"57dea3d8fd23cd690dfb4e4e7f2713bd6b43347e494ed9c3a93295c590e4c985"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e63f46.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:14:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c0e49766-8b97-446f-b201-a85cf2b0ba70","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:14:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c0e49766-8b97-446f-b201-a85cf2b0ba70","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:14:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c0e49766-8b97-446f-b201-a85cf2b0ba70","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e63f46/auth-test-model-e63f46\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:14:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c0e49766-8b97-446f-b201-a85cf2b0ba70","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T21:14:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c0e49766-8b97-446f-b201-a85cf2b0ba70","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T21:14:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c0e49766-8b97-446f-b201-a85cf2b0ba70","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T21:14:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c0e49766-8b97-446f-b201-a85cf2b0ba70","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T21:14:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c0e49766-8b97-446f-b201-a85cf2b0ba70","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T21:14:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a409a187-2471-4cd3-b715-0fd29c45787f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:58890","PortSpecifier":{"PortValue":58890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a409a187-2471-4cd3-b715-0fd29c45787f","method":"GET","path":"/maas-api/v1/api-keys/96088a17-f8db-4138-9adc-e455e232909e","host":"e2e-shared-b-e63f46.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T21:14:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a409a187-2471-4cd3-b715-0fd29c45787f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:58890","PortSpecifier":{"PortValue":58890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783718053,"nanos":27783060},"http":{"id":"a409a187-2471-4cd3-b715-0fd29c45787f","method":"GET","headers":{":authority":"e2e-shared-b-e63f46.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/96088a17-f8db-4138-9adc-e455e232909e",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:14:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a409a187-2471-4cd3-b715-0fd29c45787f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T21:14:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a409a187-2471-4cd3-b715-0fd29c45787f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5c8ab2d5-ac60-492f-9b62-36f585e148c2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f392fc79-4b6b-4571-a559-64ef3c7b3566"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2f28d6eab427"]}} {"level":"debug","ts":"2026-07-10T21:14:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a409a187-2471-4cd3-b715-0fd29c45787f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2f28d6eab427"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f392fc79-4b6b-4571-a559-64ef3c7b3566"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5c8ab2d5-ac60-492f-9b62-36f585e148c2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"57dea3d8fd23cd690dfb4e4e7f2713bd6b43347e494ed9c3a93295c590e4c985"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e63f46.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/96088a17-f8db-4138-9adc-e455e232909e",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:14:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a409a187-2471-4cd3-b715-0fd29c45787f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:14:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a409a187-2471-4cd3-b715-0fd29c45787f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:14:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a409a187-2471-4cd3-b715-0fd29c45787f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e63f46/auth-test-model-e63f46\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:14:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a409a187-2471-4cd3-b715-0fd29c45787f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T21:14:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a409a187-2471-4cd3-b715-0fd29c45787f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T21:14:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a409a187-2471-4cd3-b715-0fd29c45787f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T21:14:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a409a187-2471-4cd3-b715-0fd29c45787f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T21:14:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a409a187-2471-4cd3-b715-0fd29c45787f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T21:14:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8eef7af5-6904-4c99-a715-01f1a6a88ed7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:37996","PortSpecifier":{"PortValue":37996}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8eef7af5-6904-4c99-a715-01f1a6a88ed7","method":"GET","path":"/maas-api/v1/api-keys/96088a17-f8db-4138-9adc-e455e232909e","host":"e2e-shared-a-01037d.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T21:14:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8eef7af5-6904-4c99-a715-01f1a6a88ed7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:37996","PortSpecifier":{"PortValue":37996}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783718053,"nanos":69470224},"http":{"id":"8eef7af5-6904-4c99-a715-01f1a6a88ed7","method":"GET","headers":{":authority":"e2e-shared-a-01037d.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/96088a17-f8db-4138-9adc-e455e232909e",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:14:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8eef7af5-6904-4c99-a715-01f1a6a88ed7","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T21:14:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8eef7af5-6904-4c99-a715-01f1a6a88ed7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5c8ab2d5-ac60-492f-9b62-36f585e148c2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f392fc79-4b6b-4571-a559-64ef3c7b3566"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2f28d6eab427"]}} {"level":"debug","ts":"2026-07-10T21:14:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8eef7af5-6904-4c99-a715-01f1a6a88ed7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2f28d6eab427"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f392fc79-4b6b-4571-a559-64ef3c7b3566"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5c8ab2d5-ac60-492f-9b62-36f585e148c2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8eee558a6e1b3624d4065fc7008e112d07d12000aeba9ec4e0bbb69202e0afe6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-01037d.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/96088a17-f8db-4138-9adc-e455e232909e",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:14:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8eef7af5-6904-4c99-a715-01f1a6a88ed7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:14:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8eef7af5-6904-4c99-a715-01f1a6a88ed7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:14:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8eef7af5-6904-4c99-a715-01f1a6a88ed7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-01037d/auth-test-model-01037d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:14:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8eef7af5-6904-4c99-a715-01f1a6a88ed7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T21:14:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8eef7af5-6904-4c99-a715-01f1a6a88ed7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T21:14:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8eef7af5-6904-4c99-a715-01f1a6a88ed7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-10T21:14:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8eef7af5-6904-4c99-a715-01f1a6a88ed7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T21:14:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8eef7af5-6904-4c99-a715-01f1a6a88ed7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T21:14:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ef1cdb63-f59b-474c-bbf4-80e988c02036","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:53230","PortSpecifier":{"PortValue":53230}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ef1cdb63-f59b-474c-bbf4-80e988c02036","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-01037d.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T21:14:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ef1cdb63-f59b-474c-bbf4-80e988c02036","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:53230","PortSpecifier":{"PortValue":53230}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783718070,"nanos":262676866},"http":{"id":"ef1cdb63-f59b-474c-bbf4-80e988c02036","method":"POST","headers":{":authority":"e2e-shared-a-01037d.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:14:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ef1cdb63-f59b-474c-bbf4-80e988c02036","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T21:14:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ef1cdb63-f59b-474c-bbf4-80e988c02036","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5c8ab2d5-ac60-492f-9b62-36f585e148c2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f392fc79-4b6b-4571-a559-64ef3c7b3566"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2f28d6eab427"]}} {"level":"debug","ts":"2026-07-10T21:14:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ef1cdb63-f59b-474c-bbf4-80e988c02036","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2f28d6eab427"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f392fc79-4b6b-4571-a559-64ef3c7b3566"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5c8ab2d5-ac60-492f-9b62-36f585e148c2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8eee558a6e1b3624d4065fc7008e112d07d12000aeba9ec4e0bbb69202e0afe6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-01037d.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:14:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef1cdb63-f59b-474c-bbf4-80e988c02036","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:14:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef1cdb63-f59b-474c-bbf4-80e988c02036","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:14:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef1cdb63-f59b-474c-bbf4-80e988c02036","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-01037d/auth-test-model-01037d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:14:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ef1cdb63-f59b-474c-bbf4-80e988c02036","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T21:14:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef1cdb63-f59b-474c-bbf4-80e988c02036","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T21:14:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef1cdb63-f59b-474c-bbf4-80e988c02036","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T21:14:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ef1cdb63-f59b-474c-bbf4-80e988c02036","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T21:14:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ef1cdb63-f59b-474c-bbf4-80e988c02036","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T21:14:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"be3ceb23-f4ae-4cb6-b90b-c7ae3d7f5df8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:57108","PortSpecifier":{"PortValue":57108}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"be3ceb23-f4ae-4cb6-b90b-c7ae3d7f5df8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e63f46.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T21:14:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"be3ceb23-f4ae-4cb6-b90b-c7ae3d7f5df8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:57108","PortSpecifier":{"PortValue":57108}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783718070,"nanos":297561438},"http":{"id":"be3ceb23-f4ae-4cb6-b90b-c7ae3d7f5df8","method":"POST","headers":{":authority":"e2e-shared-b-e63f46.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:14:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"be3ceb23-f4ae-4cb6-b90b-c7ae3d7f5df8","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T21:14:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"be3ceb23-f4ae-4cb6-b90b-c7ae3d7f5df8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5c8ab2d5-ac60-492f-9b62-36f585e148c2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f392fc79-4b6b-4571-a559-64ef3c7b3566"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2f28d6eab427"]}} {"level":"debug","ts":"2026-07-10T21:14:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"be3ceb23-f4ae-4cb6-b90b-c7ae3d7f5df8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2f28d6eab427"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f392fc79-4b6b-4571-a559-64ef3c7b3566"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5c8ab2d5-ac60-492f-9b62-36f585e148c2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"57dea3d8fd23cd690dfb4e4e7f2713bd6b43347e494ed9c3a93295c590e4c985"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e63f46.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:14:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be3ceb23-f4ae-4cb6-b90b-c7ae3d7f5df8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:14:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be3ceb23-f4ae-4cb6-b90b-c7ae3d7f5df8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:14:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be3ceb23-f4ae-4cb6-b90b-c7ae3d7f5df8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e63f46/auth-test-model-e63f46\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:14:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"be3ceb23-f4ae-4cb6-b90b-c7ae3d7f5df8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T21:14:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be3ceb23-f4ae-4cb6-b90b-c7ae3d7f5df8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T21:14:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be3ceb23-f4ae-4cb6-b90b-c7ae3d7f5df8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T21:14:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"be3ceb23-f4ae-4cb6-b90b-c7ae3d7f5df8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T21:14:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"be3ceb23-f4ae-4cb6-b90b-c7ae3d7f5df8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T21:14:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1ef21a7a-7c6c-41d6-a8c5-b939f54930b7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:53236","PortSpecifier":{"PortValue":53236}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1ef21a7a-7c6c-41d6-a8c5-b939f54930b7","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-01037d.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T21:14:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1ef21a7a-7c6c-41d6-a8c5-b939f54930b7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:53236","PortSpecifier":{"PortValue":53236}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783718070,"nanos":334937935},"http":{"id":"1ef21a7a-7c6c-41d6-a8c5-b939f54930b7","method":"POST","headers":{":authority":"e2e-shared-a-01037d.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:14:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1ef21a7a-7c6c-41d6-a8c5-b939f54930b7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-tmmgOeOYoV37YQKb_mN94H2NtVJaVs9OAUzx2E3wvjeBEMLhct5p0A00M1Ir"} {"level":"debug","ts":"2026-07-10T21:14:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1ef21a7a-7c6c-41d6-a8c5-b939f54930b7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-01037d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-tmmgOeOYoV37YQKb_mN94H2NtVJaVs9OAUzx2E3wvjeBEMLhct5p0A00M1Ir\"}"} {"level":"debug","ts":"2026-07-10T21:14:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1ef21a7a-7c6c-41d6-a8c5-b939f54930b7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-01037d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"493ebc8c-1dfc-4602-a245-eec745f61f66","keyName":"e2e-auth-iso-a-73dca9","subscription":"e2e-auth-iso-d10c47","tenant":"e2e-shared-a-01037d","userId":"493ebc8c-1dfc-4602-a245-eec745f61f66","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T21:14:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1ef21a7a-7c6c-41d6-a8c5-b939f54930b7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:14:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ef21a7a-7c6c-41d6-a8c5-b939f54930b7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:14:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ef21a7a-7c6c-41d6-a8c5-b939f54930b7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:14:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ef21a7a-7c6c-41d6-a8c5-b939f54930b7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-01037d/auth-test-model-01037d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:14:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1ef21a7a-7c6c-41d6-a8c5-b939f54930b7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-10T21:14:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ef21a7a-7c6c-41d6-a8c5-b939f54930b7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-d10c47"} {"level":"debug","ts":"2026-07-10T21:14:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ef21a7a-7c6c-41d6-a8c5-b939f54930b7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T21:14:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ef21a7a-7c6c-41d6-a8c5-b939f54930b7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T21:14:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1ef21a7a-7c6c-41d6-a8c5-b939f54930b7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T21:14:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1ef21a7a-7c6c-41d6-a8c5-b939f54930b7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T21:14:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f68c6ca8db5c6669f07911bb160f93bff711dd38f96b53799fc0322338d213b3"} {"level":"info","ts":"2026-07-10T21:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/55bfa05466c7561edf1ed8d902a1d12e4d203b0b07f06291a64d66394a7b5ed0"} {"level":"info","ts":"2026-07-10T21:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d123240363a55ee258442290a667ae2eeac52a6f03b0e5bcc6df84434bacb99f"} {"level":"info","ts":"2026-07-10T21:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/21de4757405eb07c31a7299473bb8ab69e9094b5d0d26d56925154325a016cad"} {"level":"info","ts":"2026-07-10T21:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2f7bb5b14512bb117dd77dc985b53a88e03395ffa05751ca22feedb00fb46c29"} {"level":"info","ts":"2026-07-10T21:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/af644d3b9b9d7d20816df92a1465604eb44c9340e2610711e75a7536d3c1b610"} {"level":"info","ts":"2026-07-10T21:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cc4bfd5e728d5b17a74fd5b336d966f9da4c2d95637da1b03efa97b47a4cb8b2"} {"level":"info","ts":"2026-07-10T21:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/975f93442ec5bfdefecad12699d51891cc13c915c683de9658c08749c672054b"} {"level":"info","ts":"2026-07-10T21:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e004fc39aec7683eaecc11b7b6c93b8bd1ffd0d8982fc25f82c964b3db093ff8"} {"level":"info","ts":"2026-07-10T21:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d7278c22966d70765e2554b822e73710d609f0864743f7ed4d9c74fb880f4883"} {"level":"info","ts":"2026-07-10T21:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/59bc7ced2511471c30670d18773bbc47b3cbd3cb5acd73b7bf9b56d7b5028aee"} {"level":"info","ts":"2026-07-10T21:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6cfcb0e4da9f1aca6c1eb570cd489ae0742a0b0b67deb79718138d6fa8d25bcd"} {"level":"info","ts":"2026-07-10T21:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d0f72098e57f516e06df1fd9a27f5bbdb0b443d6ba7c83d5c51613e9abe0a4ac"} {"level":"info","ts":"2026-07-10T21:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/234f8df64755515ec2dc4af874b44f74d57995744280f19e8df8b596b70eb284"} {"level":"info","ts":"2026-07-10T21:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/24524a1d51248cba3a40c7e7f44202c67a72653e09cc58c30f24e9a823871ba6"} {"level":"info","ts":"2026-07-10T21:14:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/da68d0f41c88236afe2bd344371a0e6679f01c57fab3cecf7bb0b806c9a59c7c"} {"level":"debug","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff9909f1bba64083306f4b7c5bbc7c2086c2423b87206dc9f8d12f7adbb4cc04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:14:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:14:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff9909f1bba64083306f4b7c5bbc7c2086c2423b87206dc9f8d12f7adbb4cc04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff9909f1bba64083306f4b7c5bbc7c2086c2423b87206dc9f8d12f7adbb4cc04","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff9909f1bba64083306f4b7c5bbc7c2086c2423b87206dc9f8d12f7adbb4cc04"} {"level":"debug","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff9909f1bba64083306f4b7c5bbc7c2086c2423b87206dc9f8d12f7adbb4cc04","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff9909f1bba64083306f4b7c5bbc7c2086c2423b87206dc9f8d12f7adbb4cc04"} {"level":"debug","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff9909f1bba64083306f4b7c5bbc7c2086c2423b87206dc9f8d12f7adbb4cc04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:14:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:14:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff9909f1bba64083306f4b7c5bbc7c2086c2423b87206dc9f8d12f7adbb4cc04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff9909f1bba64083306f4b7c5bbc7c2086c2423b87206dc9f8d12f7adbb4cc04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff9909f1bba64083306f4b7c5bbc7c2086c2423b87206dc9f8d12f7adbb4cc04","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff9909f1bba64083306f4b7c5bbc7c2086c2423b87206dc9f8d12f7adbb4cc04"} {"level":"debug","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f96b2f83dc390dbb468835ea0c8e0d2432deda80a89b7c2c6a9f7975c5a65721","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:14:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:14:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f96b2f83dc390dbb468835ea0c8e0d2432deda80a89b7c2c6a9f7975c5a65721"} {"level":"info","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f96b2f83dc390dbb468835ea0c8e0d2432deda80a89b7c2c6a9f7975c5a65721","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f96b2f83dc390dbb468835ea0c8e0d2432deda80a89b7c2c6a9f7975c5a65721","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f96b2f83dc390dbb468835ea0c8e0d2432deda80a89b7c2c6a9f7975c5a65721","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f96b2f83dc390dbb468835ea0c8e0d2432deda80a89b7c2c6a9f7975c5a65721"} {"level":"debug","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f96b2f83dc390dbb468835ea0c8e0d2432deda80a89b7c2c6a9f7975c5a65721","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:14:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:14:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f96b2f83dc390dbb468835ea0c8e0d2432deda80a89b7c2c6a9f7975c5a65721"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f96b2f83dc390dbb468835ea0c8e0d2432deda80a89b7c2c6a9f7975c5a65721","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f96b2f83dc390dbb468835ea0c8e0d2432deda80a89b7c2c6a9f7975c5a65721","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:14:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:14:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f96b2f83dc390dbb468835ea0c8e0d2432deda80a89b7c2c6a9f7975c5a65721","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f96b2f83dc390dbb468835ea0c8e0d2432deda80a89b7c2c6a9f7975c5a65721","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f96b2f83dc390dbb468835ea0c8e0d2432deda80a89b7c2c6a9f7975c5a65721","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f96b2f83dc390dbb468835ea0c8e0d2432deda80a89b7c2c6a9f7975c5a65721"} {"level":"debug","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f96b2f83dc390dbb468835ea0c8e0d2432deda80a89b7c2c6a9f7975c5a65721","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f96b2f83dc390dbb468835ea0c8e0d2432deda80a89b7c2c6a9f7975c5a65721"} {"level":"debug","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f96b2f83dc390dbb468835ea0c8e0d2432deda80a89b7c2c6a9f7975c5a65721","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:14:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:14:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f96b2f83dc390dbb468835ea0c8e0d2432deda80a89b7c2c6a9f7975c5a65721"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f96b2f83dc390dbb468835ea0c8e0d2432deda80a89b7c2c6a9f7975c5a65721","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f96b2f83dc390dbb468835ea0c8e0d2432deda80a89b7c2c6a9f7975c5a65721","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:14:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:14:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f96b2f83dc390dbb468835ea0c8e0d2432deda80a89b7c2c6a9f7975c5a65721","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f96b2f83dc390dbb468835ea0c8e0d2432deda80a89b7c2c6a9f7975c5a65721","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f96b2f83dc390dbb468835ea0c8e0d2432deda80a89b7c2c6a9f7975c5a65721","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f96b2f83dc390dbb468835ea0c8e0d2432deda80a89b7c2c6a9f7975c5a65721"} {"level":"debug","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3255dd9d669c5016b79953dcb3972854fbd8e2dab48449ec49ca84500f1dda91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:14:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:14:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3255dd9d669c5016b79953dcb3972854fbd8e2dab48449ec49ca84500f1dda91","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3255dd9d669c5016b79953dcb3972854fbd8e2dab48449ec49ca84500f1dda91","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f96b2f83dc390dbb468835ea0c8e0d2432deda80a89b7c2c6a9f7975c5a65721","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3255dd9d669c5016b79953dcb3972854fbd8e2dab48449ec49ca84500f1dda91","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f96b2f83dc390dbb468835ea0c8e0d2432deda80a89b7c2c6a9f7975c5a65721"} {"level":"debug","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3255dd9d669c5016b79953dcb3972854fbd8e2dab48449ec49ca84500f1dda91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:14:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:14:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3255dd9d669c5016b79953dcb3972854fbd8e2dab48449ec49ca84500f1dda91"} {"level":"info","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3255dd9d669c5016b79953dcb3972854fbd8e2dab48449ec49ca84500f1dda91","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f96b2f83dc390dbb468835ea0c8e0d2432deda80a89b7c2c6a9f7975c5a65721","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:14:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:14:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f96b2f83dc390dbb468835ea0c8e0d2432deda80a89b7c2c6a9f7975c5a65721"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3255dd9d669c5016b79953dcb3972854fbd8e2dab48449ec49ca84500f1dda91"} {"level":"info","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f96b2f83dc390dbb468835ea0c8e0d2432deda80a89b7c2c6a9f7975c5a65721","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3255dd9d669c5016b79953dcb3972854fbd8e2dab48449ec49ca84500f1dda91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:14:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:14:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3255dd9d669c5016b79953dcb3972854fbd8e2dab48449ec49ca84500f1dda91"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3255dd9d669c5016b79953dcb3972854fbd8e2dab48449ec49ca84500f1dda91","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f96b2f83dc390dbb468835ea0c8e0d2432deda80a89b7c2c6a9f7975c5a65721","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:14:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:14:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f96b2f83dc390dbb468835ea0c8e0d2432deda80a89b7c2c6a9f7975c5a65721"} {"level":"info","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f96b2f83dc390dbb468835ea0c8e0d2432deda80a89b7c2c6a9f7975c5a65721","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3255dd9d669c5016b79953dcb3972854fbd8e2dab48449ec49ca84500f1dda91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:14:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:14:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3255dd9d669c5016b79953dcb3972854fbd8e2dab48449ec49ca84500f1dda91"} {"level":"info","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3255dd9d669c5016b79953dcb3972854fbd8e2dab48449ec49ca84500f1dda91","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f96b2f83dc390dbb468835ea0c8e0d2432deda80a89b7c2c6a9f7975c5a65721","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3255dd9d669c5016b79953dcb3972854fbd8e2dab48449ec49ca84500f1dda91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:14:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:14:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3255dd9d669c5016b79953dcb3972854fbd8e2dab48449ec49ca84500f1dda91"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f96b2f83dc390dbb468835ea0c8e0d2432deda80a89b7c2c6a9f7975c5a65721"} {"level":"info","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3255dd9d669c5016b79953dcb3972854fbd8e2dab48449ec49ca84500f1dda91","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f96b2f83dc390dbb468835ea0c8e0d2432deda80a89b7c2c6a9f7975c5a65721","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:14:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:14:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f96b2f83dc390dbb468835ea0c8e0d2432deda80a89b7c2c6a9f7975c5a65721"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3255dd9d669c5016b79953dcb3972854fbd8e2dab48449ec49ca84500f1dda91"} {"level":"info","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f96b2f83dc390dbb468835ea0c8e0d2432deda80a89b7c2c6a9f7975c5a65721","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3255dd9d669c5016b79953dcb3972854fbd8e2dab48449ec49ca84500f1dda91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:14:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:14:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3255dd9d669c5016b79953dcb3972854fbd8e2dab48449ec49ca84500f1dda91"} {"level":"info","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3255dd9d669c5016b79953dcb3972854fbd8e2dab48449ec49ca84500f1dda91","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f96b2f83dc390dbb468835ea0c8e0d2432deda80a89b7c2c6a9f7975c5a65721","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:14:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:14:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f96b2f83dc390dbb468835ea0c8e0d2432deda80a89b7c2c6a9f7975c5a65721","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3255dd9d669c5016b79953dcb3972854fbd8e2dab48449ec49ca84500f1dda91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:14:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:14:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3255dd9d669c5016b79953dcb3972854fbd8e2dab48449ec49ca84500f1dda91"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f96b2f83dc390dbb468835ea0c8e0d2432deda80a89b7c2c6a9f7975c5a65721"} {"level":"info","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3255dd9d669c5016b79953dcb3972854fbd8e2dab48449ec49ca84500f1dda91","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad4438427a5982ac7d60d6e6703d631648dc3fd868926b6b3638a5b40fad8d4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:14:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:14:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3255dd9d669c5016b79953dcb3972854fbd8e2dab48449ec49ca84500f1dda91"} {"level":"info","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad4438427a5982ac7d60d6e6703d631648dc3fd868926b6b3638a5b40fad8d4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f96b2f83dc390dbb468835ea0c8e0d2432deda80a89b7c2c6a9f7975c5a65721","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:14:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:14:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f96b2f83dc390dbb468835ea0c8e0d2432deda80a89b7c2c6a9f7975c5a65721"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad4438427a5982ac7d60d6e6703d631648dc3fd868926b6b3638a5b40fad8d4a"} {"level":"info","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f96b2f83dc390dbb468835ea0c8e0d2432deda80a89b7c2c6a9f7975c5a65721","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3255dd9d669c5016b79953dcb3972854fbd8e2dab48449ec49ca84500f1dda91","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad4438427a5982ac7d60d6e6703d631648dc3fd868926b6b3638a5b40fad8d4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:14:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:14:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad4438427a5982ac7d60d6e6703d631648dc3fd868926b6b3638a5b40fad8d4a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad4438427a5982ac7d60d6e6703d631648dc3fd868926b6b3638a5b40fad8d4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f96b2f83dc390dbb468835ea0c8e0d2432deda80a89b7c2c6a9f7975c5a65721","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:14:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:14:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f96b2f83dc390dbb468835ea0c8e0d2432deda80a89b7c2c6a9f7975c5a65721"} {"level":"info","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3255dd9d669c5016b79953dcb3972854fbd8e2dab48449ec49ca84500f1dda91"} {"level":"info","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f96b2f83dc390dbb468835ea0c8e0d2432deda80a89b7c2c6a9f7975c5a65721","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad4438427a5982ac7d60d6e6703d631648dc3fd868926b6b3638a5b40fad8d4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:14:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:14:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad4438427a5982ac7d60d6e6703d631648dc3fd868926b6b3638a5b40fad8d4a"} {"level":"info","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad4438427a5982ac7d60d6e6703d631648dc3fd868926b6b3638a5b40fad8d4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f96b2f83dc390dbb468835ea0c8e0d2432deda80a89b7c2c6a9f7975c5a65721","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad4438427a5982ac7d60d6e6703d631648dc3fd868926b6b3638a5b40fad8d4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:14:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:14:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad4438427a5982ac7d60d6e6703d631648dc3fd868926b6b3638a5b40fad8d4a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad4438427a5982ac7d60d6e6703d631648dc3fd868926b6b3638a5b40fad8d4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f96b2f83dc390dbb468835ea0c8e0d2432deda80a89b7c2c6a9f7975c5a65721","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad4438427a5982ac7d60d6e6703d631648dc3fd868926b6b3638a5b40fad8d4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:14:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:14:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad4438427a5982ac7d60d6e6703d631648dc3fd868926b6b3638a5b40fad8d4a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f96b2f83dc390dbb468835ea0c8e0d2432deda80a89b7c2c6a9f7975c5a65721"} {"level":"error","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ad4438427a5982ac7d60d6e6703d631648dc3fd868926b6b3638a5b40fad8d4a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ad4438427a5982ac7d60d6e6703d631648dc3fd868926b6b3638a5b40fad8d4a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad4438427a5982ac7d60d6e6703d631648dc3fd868926b6b3638a5b40fad8d4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:14:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:14:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad4438427a5982ac7d60d6e6703d631648dc3fd868926b6b3638a5b40fad8d4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f96b2f83dc390dbb468835ea0c8e0d2432deda80a89b7c2c6a9f7975c5a65721","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:14:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:14:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f96b2f83dc390dbb468835ea0c8e0d2432deda80a89b7c2c6a9f7975c5a65721"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad4438427a5982ac7d60d6e6703d631648dc3fd868926b6b3638a5b40fad8d4a"} {"level":"info","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f96b2f83dc390dbb468835ea0c8e0d2432deda80a89b7c2c6a9f7975c5a65721","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad4438427a5982ac7d60d6e6703d631648dc3fd868926b6b3638a5b40fad8d4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f96b2f83dc390dbb468835ea0c8e0d2432deda80a89b7c2c6a9f7975c5a65721","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad4438427a5982ac7d60d6e6703d631648dc3fd868926b6b3638a5b40fad8d4a"} {"level":"debug","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad4438427a5982ac7d60d6e6703d631648dc3fd868926b6b3638a5b40fad8d4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:14:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:14:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad4438427a5982ac7d60d6e6703d631648dc3fd868926b6b3638a5b40fad8d4a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad4438427a5982ac7d60d6e6703d631648dc3fd868926b6b3638a5b40fad8d4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61f61e6aff905dc0ce7b80643d6412dfbd5141c8c23a8b21248207e929dcda7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:14:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:14:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:14:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f96b2f83dc390dbb468835ea0c8e0d2432deda80a89b7c2c6a9f7975c5a65721"} {"level":"info","ts":"2026-07-10T21:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61f61e6aff905dc0ce7b80643d6412dfbd5141c8c23a8b21248207e929dcda7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad4438427a5982ac7d60d6e6703d631648dc3fd868926b6b3638a5b40fad8d4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61f61e6aff905dc0ce7b80643d6412dfbd5141c8c23a8b21248207e929dcda7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:14:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:14:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61f61e6aff905dc0ce7b80643d6412dfbd5141c8c23a8b21248207e929dcda7a"} {"level":"info","ts":"2026-07-10T21:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61f61e6aff905dc0ce7b80643d6412dfbd5141c8c23a8b21248207e929dcda7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61f61e6aff905dc0ce7b80643d6412dfbd5141c8c23a8b21248207e929dcda7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:14:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:14:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["61f61e6aff905dc0ce7b80643d6412dfbd5141c8c23a8b21248207e929dcda7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-10T21:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"61f61e6aff905dc0ce7b80643d6412dfbd5141c8c23a8b21248207e929dcda7a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"61f61e6aff905dc0ce7b80643d6412dfbd5141c8c23a8b21248207e929dcda7a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T21:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61f61e6aff905dc0ce7b80643d6412dfbd5141c8c23a8b21248207e929dcda7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:14:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:14:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["61f61e6aff905dc0ce7b80643d6412dfbd5141c8c23a8b21248207e929dcda7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad4438427a5982ac7d60d6e6703d631648dc3fd868926b6b3638a5b40fad8d4a"} {"level":"info","ts":"2026-07-10T21:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61f61e6aff905dc0ce7b80643d6412dfbd5141c8c23a8b21248207e929dcda7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61f61e6aff905dc0ce7b80643d6412dfbd5141c8c23a8b21248207e929dcda7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61f61e6aff905dc0ce7b80643d6412dfbd5141c8c23a8b21248207e929dcda7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:14:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:14:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61f61e6aff905dc0ce7b80643d6412dfbd5141c8c23a8b21248207e929dcda7a"} {"level":"info","ts":"2026-07-10T21:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61f61e6aff905dc0ce7b80643d6412dfbd5141c8c23a8b21248207e929dcda7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61f61e6aff905dc0ce7b80643d6412dfbd5141c8c23a8b21248207e929dcda7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:14:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:14:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-10T21:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"61f61e6aff905dc0ce7b80643d6412dfbd5141c8c23a8b21248207e929dcda7a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"61f61e6aff905dc0ce7b80643d6412dfbd5141c8c23a8b21248207e929dcda7a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T21:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61f61e6aff905dc0ce7b80643d6412dfbd5141c8c23a8b21248207e929dcda7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61f61e6aff905dc0ce7b80643d6412dfbd5141c8c23a8b21248207e929dcda7a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61f61e6aff905dc0ce7b80643d6412dfbd5141c8c23a8b21248207e929dcda7a"} {"level":"info","ts":"2026-07-10T21:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61f61e6aff905dc0ce7b80643d6412dfbd5141c8c23a8b21248207e929dcda7a"} {"level":"debug","ts":"2026-07-10T21:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61f61e6aff905dc0ce7b80643d6412dfbd5141c8c23a8b21248207e929dcda7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:14:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:14:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["61f61e6aff905dc0ce7b80643d6412dfbd5141c8c23a8b21248207e929dcda7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61f61e6aff905dc0ce7b80643d6412dfbd5141c8c23a8b21248207e929dcda7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61f61e6aff905dc0ce7b80643d6412dfbd5141c8c23a8b21248207e929dcda7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:14:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:14:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61f61e6aff905dc0ce7b80643d6412dfbd5141c8c23a8b21248207e929dcda7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5acad8ae36f752c94f378408bb08276b7df2488b15e82ccda715122d0d70e98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:14:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:14:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5acad8ae36f752c94f378408bb08276b7df2488b15e82ccda715122d0d70e98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61f61e6aff905dc0ce7b80643d6412dfbd5141c8c23a8b21248207e929dcda7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5acad8ae36f752c94f378408bb08276b7df2488b15e82ccda715122d0d70e98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5acad8ae36f752c94f378408bb08276b7df2488b15e82ccda715122d0d70e98","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61f61e6aff905dc0ce7b80643d6412dfbd5141c8c23a8b21248207e929dcda7a"} {"level":"debug","ts":"2026-07-10T21:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61f61e6aff905dc0ce7b80643d6412dfbd5141c8c23a8b21248207e929dcda7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:14:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:14:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["61f61e6aff905dc0ce7b80643d6412dfbd5141c8c23a8b21248207e929dcda7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61f61e6aff905dc0ce7b80643d6412dfbd5141c8c23a8b21248207e929dcda7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61f61e6aff905dc0ce7b80643d6412dfbd5141c8c23a8b21248207e929dcda7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5acad8ae36f752c94f378408bb08276b7df2488b15e82ccda715122d0d70e98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:14:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:14:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5acad8ae36f752c94f378408bb08276b7df2488b15e82ccda715122d0d70e98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5acad8ae36f752c94f378408bb08276b7df2488b15e82ccda715122d0d70e98","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5acad8ae36f752c94f378408bb08276b7df2488b15e82ccda715122d0d70e98"} {"level":"info","ts":"2026-07-10T21:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61f61e6aff905dc0ce7b80643d6412dfbd5141c8c23a8b21248207e929dcda7a"} {"level":"debug","ts":"2026-07-10T21:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5acad8ae36f752c94f378408bb08276b7df2488b15e82ccda715122d0d70e98","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5acad8ae36f752c94f378408bb08276b7df2488b15e82ccda715122d0d70e98"} {"level":"debug","ts":"2026-07-10T21:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0eb4634a717986c0299231f4d749611cd8dcb5934783ee762933ee02f9a27d80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:14:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:14:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0eb4634a717986c0299231f4d749611cd8dcb5934783ee762933ee02f9a27d80","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0eb4634a717986c0299231f4d749611cd8dcb5934783ee762933ee02f9a27d80","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0eb4634a717986c0299231f4d749611cd8dcb5934783ee762933ee02f9a27d80"} {"level":"debug","ts":"2026-07-10T21:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0eb4634a717986c0299231f4d749611cd8dcb5934783ee762933ee02f9a27d80","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0eb4634a717986c0299231f4d749611cd8dcb5934783ee762933ee02f9a27d80"} {"level":"debug","ts":"2026-07-10T21:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0eb4634a717986c0299231f4d749611cd8dcb5934783ee762933ee02f9a27d80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:14:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:14:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0eb4634a717986c0299231f4d749611cd8dcb5934783ee762933ee02f9a27d80"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0eb4634a717986c0299231f4d749611cd8dcb5934783ee762933ee02f9a27d80","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0eb4634a717986c0299231f4d749611cd8dcb5934783ee762933ee02f9a27d80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:14:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:14:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0eb4634a717986c0299231f4d749611cd8dcb5934783ee762933ee02f9a27d80","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5acad8ae36f752c94f378408bb08276b7df2488b15e82ccda715122d0d70e98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:14:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:14:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5acad8ae36f752c94f378408bb08276b7df2488b15e82ccda715122d0d70e98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0eb4634a717986c0299231f4d749611cd8dcb5934783ee762933ee02f9a27d80"} {"level":"info","ts":"2026-07-10T21:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5acad8ae36f752c94f378408bb08276b7df2488b15e82ccda715122d0d70e98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0eb4634a717986c0299231f4d749611cd8dcb5934783ee762933ee02f9a27d80","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5acad8ae36f752c94f378408bb08276b7df2488b15e82ccda715122d0d70e98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"379052ef4b75a254113da3aae9eefd2364c6fb1f95e28f6134d3d31f8174b730","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:14:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:14:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0eb4634a717986c0299231f4d749611cd8dcb5934783ee762933ee02f9a27d80"} {"level":"info","ts":"2026-07-10T21:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"379052ef4b75a254113da3aae9eefd2364c6fb1f95e28f6134d3d31f8174b730","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0eb4634a717986c0299231f4d749611cd8dcb5934783ee762933ee02f9a27d80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:14:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:14:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0eb4634a717986c0299231f4d749611cd8dcb5934783ee762933ee02f9a27d80"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5acad8ae36f752c94f378408bb08276b7df2488b15e82ccda715122d0d70e98"} {"level":"info","ts":"2026-07-10T21:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0eb4634a717986c0299231f4d749611cd8dcb5934783ee762933ee02f9a27d80","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"379052ef4b75a254113da3aae9eefd2364c6fb1f95e28f6134d3d31f8174b730","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:14:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:14:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"379052ef4b75a254113da3aae9eefd2364c6fb1f95e28f6134d3d31f8174b730","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0eb4634a717986c0299231f4d749611cd8dcb5934783ee762933ee02f9a27d80","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"379052ef4b75a254113da3aae9eefd2364c6fb1f95e28f6134d3d31f8174b730","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/379052ef4b75a254113da3aae9eefd2364c6fb1f95e28f6134d3d31f8174b730"} {"level":"debug","ts":"2026-07-10T21:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"379052ef4b75a254113da3aae9eefd2364c6fb1f95e28f6134d3d31f8174b730","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:14:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:14:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["379052ef4b75a254113da3aae9eefd2364c6fb1f95e28f6134d3d31f8174b730"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0eb4634a717986c0299231f4d749611cd8dcb5934783ee762933ee02f9a27d80"} {"level":"info","ts":"2026-07-10T21:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"379052ef4b75a254113da3aae9eefd2364c6fb1f95e28f6134d3d31f8174b730","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"379052ef4b75a254113da3aae9eefd2364c6fb1f95e28f6134d3d31f8174b730","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:14:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:14:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/379052ef4b75a254113da3aae9eefd2364c6fb1f95e28f6134d3d31f8174b730"} {"level":"info","ts":"2026-07-10T21:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"379052ef4b75a254113da3aae9eefd2364c6fb1f95e28f6134d3d31f8174b730","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"379052ef4b75a254113da3aae9eefd2364c6fb1f95e28f6134d3d31f8174b730","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"379052ef4b75a254113da3aae9eefd2364c6fb1f95e28f6134d3d31f8174b730","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/379052ef4b75a254113da3aae9eefd2364c6fb1f95e28f6134d3d31f8174b730"} {"level":"debug","ts":"2026-07-10T21:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"379052ef4b75a254113da3aae9eefd2364c6fb1f95e28f6134d3d31f8174b730","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/379052ef4b75a254113da3aae9eefd2364c6fb1f95e28f6134d3d31f8174b730"} {"level":"debug","ts":"2026-07-10T21:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"379052ef4b75a254113da3aae9eefd2364c6fb1f95e28f6134d3d31f8174b730","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:14:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:14:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["379052ef4b75a254113da3aae9eefd2364c6fb1f95e28f6134d3d31f8174b730"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"379052ef4b75a254113da3aae9eefd2364c6fb1f95e28f6134d3d31f8174b730","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"379052ef4b75a254113da3aae9eefd2364c6fb1f95e28f6134d3d31f8174b730","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/379052ef4b75a254113da3aae9eefd2364c6fb1f95e28f6134d3d31f8174b730"} {"level":"debug","ts":"2026-07-10T21:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fe60a2688b5ee1c3e927bf6a5b8cb628c393eefeb4ad351fe3381a5135b717b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:15:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:15:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fe60a2688b5ee1c3e927bf6a5b8cb628c393eefeb4ad351fe3381a5135b717b"} {"level":"info","ts":"2026-07-10T21:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fe60a2688b5ee1c3e927bf6a5b8cb628c393eefeb4ad351fe3381a5135b717b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fe60a2688b5ee1c3e927bf6a5b8cb628c393eefeb4ad351fe3381a5135b717b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fe60a2688b5ee1c3e927bf6a5b8cb628c393eefeb4ad351fe3381a5135b717b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fe60a2688b5ee1c3e927bf6a5b8cb628c393eefeb4ad351fe3381a5135b717b"} {"level":"debug","ts":"2026-07-10T21:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fe60a2688b5ee1c3e927bf6a5b8cb628c393eefeb4ad351fe3381a5135b717b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:15:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:15:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3fe60a2688b5ee1c3e927bf6a5b8cb628c393eefeb4ad351fe3381a5135b717b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fe60a2688b5ee1c3e927bf6a5b8cb628c393eefeb4ad351fe3381a5135b717b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fe60a2688b5ee1c3e927bf6a5b8cb628c393eefeb4ad351fe3381a5135b717b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fe60a2688b5ee1c3e927bf6a5b8cb628c393eefeb4ad351fe3381a5135b717b"} {"level":"debug","ts":"2026-07-10T21:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d5e13305c623be1a8bb1de78887e5c963d52e18bcf9a0aae701135c35ef921d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:15:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:15:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d5e13305c623be1a8bb1de78887e5c963d52e18bcf9a0aae701135c35ef921d"} {"level":"info","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d5e13305c623be1a8bb1de78887e5c963d52e18bcf9a0aae701135c35ef921d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d5e13305c623be1a8bb1de78887e5c963d52e18bcf9a0aae701135c35ef921d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:15:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:15:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d5e13305c623be1a8bb1de78887e5c963d52e18bcf9a0aae701135c35ef921d"} {"level":"info","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d5e13305c623be1a8bb1de78887e5c963d52e18bcf9a0aae701135c35ef921d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d5e13305c623be1a8bb1de78887e5c963d52e18bcf9a0aae701135c35ef921d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:15:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:15:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d5e13305c623be1a8bb1de78887e5c963d52e18bcf9a0aae701135c35ef921d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2d5e13305c623be1a8bb1de78887e5c963d52e18bcf9a0aae701135c35ef921d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2d5e13305c623be1a8bb1de78887e5c963d52e18bcf9a0aae701135c35ef921d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d5e13305c623be1a8bb1de78887e5c963d52e18bcf9a0aae701135c35ef921d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d5e13305c623be1a8bb1de78887e5c963d52e18bcf9a0aae701135c35ef921d"} {"level":"debug","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d5e13305c623be1a8bb1de78887e5c963d52e18bcf9a0aae701135c35ef921d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:15:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:15:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d5e13305c623be1a8bb1de78887e5c963d52e18bcf9a0aae701135c35ef921d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d5e13305c623be1a8bb1de78887e5c963d52e18bcf9a0aae701135c35ef921d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d5e13305c623be1a8bb1de78887e5c963d52e18bcf9a0aae701135c35ef921d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:15:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:15:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d5e13305c623be1a8bb1de78887e5c963d52e18bcf9a0aae701135c35ef921d"} {"level":"info","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d5e13305c623be1a8bb1de78887e5c963d52e18bcf9a0aae701135c35ef921d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d5e13305c623be1a8bb1de78887e5c963d52e18bcf9a0aae701135c35ef921d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d5e13305c623be1a8bb1de78887e5c963d52e18bcf9a0aae701135c35ef921d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d5e13305c623be1a8bb1de78887e5c963d52e18bcf9a0aae701135c35ef921d"} {"level":"debug","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d5e13305c623be1a8bb1de78887e5c963d52e18bcf9a0aae701135c35ef921d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:15:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:15:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d5e13305c623be1a8bb1de78887e5c963d52e18bcf9a0aae701135c35ef921d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d5e13305c623be1a8bb1de78887e5c963d52e18bcf9a0aae701135c35ef921d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d5e13305c623be1a8bb1de78887e5c963d52e18bcf9a0aae701135c35ef921d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:15:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:15:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d5e13305c623be1a8bb1de78887e5c963d52e18bcf9a0aae701135c35ef921d"} {"level":"info","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d5e13305c623be1a8bb1de78887e5c963d52e18bcf9a0aae701135c35ef921d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d5e13305c623be1a8bb1de78887e5c963d52e18bcf9a0aae701135c35ef921d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:15:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:15:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d5e13305c623be1a8bb1de78887e5c963d52e18bcf9a0aae701135c35ef921d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d5e13305c623be1a8bb1de78887e5c963d52e18bcf9a0aae701135c35ef921d"} {"level":"info","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d5e13305c623be1a8bb1de78887e5c963d52e18bcf9a0aae701135c35ef921d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d5e13305c623be1a8bb1de78887e5c963d52e18bcf9a0aae701135c35ef921d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:15:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:15:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d5e13305c623be1a8bb1de78887e5c963d52e18bcf9a0aae701135c35ef921d"} {"level":"info","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d5e13305c623be1a8bb1de78887e5c963d52e18bcf9a0aae701135c35ef921d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d5e13305c623be1a8bb1de78887e5c963d52e18bcf9a0aae701135c35ef921d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d5e13305c623be1a8bb1de78887e5c963d52e18bcf9a0aae701135c35ef921d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"861cdd2bc7ebe1f696a48bac573347e539d5a77f911e449cb91c85494b9e6c54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:15:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:15:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d5e13305c623be1a8bb1de78887e5c963d52e18bcf9a0aae701135c35ef921d"} {"level":"info","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"861cdd2bc7ebe1f696a48bac573347e539d5a77f911e449cb91c85494b9e6c54","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d5e13305c623be1a8bb1de78887e5c963d52e18bcf9a0aae701135c35ef921d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:15:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:15:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d5e13305c623be1a8bb1de78887e5c963d52e18bcf9a0aae701135c35ef921d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/861cdd2bc7ebe1f696a48bac573347e539d5a77f911e449cb91c85494b9e6c54"} {"level":"info","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d5e13305c623be1a8bb1de78887e5c963d52e18bcf9a0aae701135c35ef921d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"861cdd2bc7ebe1f696a48bac573347e539d5a77f911e449cb91c85494b9e6c54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:15:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:15:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/861cdd2bc7ebe1f696a48bac573347e539d5a77f911e449cb91c85494b9e6c54"} {"level":"info","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d5e13305c623be1a8bb1de78887e5c963d52e18bcf9a0aae701135c35ef921d"} {"level":"info","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"861cdd2bc7ebe1f696a48bac573347e539d5a77f911e449cb91c85494b9e6c54","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d5e13305c623be1a8bb1de78887e5c963d52e18bcf9a0aae701135c35ef921d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"861cdd2bc7ebe1f696a48bac573347e539d5a77f911e449cb91c85494b9e6c54","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"861cdd2bc7ebe1f696a48bac573347e539d5a77f911e449cb91c85494b9e6c54","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/861cdd2bc7ebe1f696a48bac573347e539d5a77f911e449cb91c85494b9e6c54"} {"level":"debug","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"861cdd2bc7ebe1f696a48bac573347e539d5a77f911e449cb91c85494b9e6c54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:15:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:15:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["861cdd2bc7ebe1f696a48bac573347e539d5a77f911e449cb91c85494b9e6c54"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"861cdd2bc7ebe1f696a48bac573347e539d5a77f911e449cb91c85494b9e6c54","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"861cdd2bc7ebe1f696a48bac573347e539d5a77f911e449cb91c85494b9e6c54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:15:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:15:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/861cdd2bc7ebe1f696a48bac573347e539d5a77f911e449cb91c85494b9e6c54"} {"level":"info","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"861cdd2bc7ebe1f696a48bac573347e539d5a77f911e449cb91c85494b9e6c54","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"861cdd2bc7ebe1f696a48bac573347e539d5a77f911e449cb91c85494b9e6c54","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"861cdd2bc7ebe1f696a48bac573347e539d5a77f911e449cb91c85494b9e6c54","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/861cdd2bc7ebe1f696a48bac573347e539d5a77f911e449cb91c85494b9e6c54"} {"level":"debug","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"861cdd2bc7ebe1f696a48bac573347e539d5a77f911e449cb91c85494b9e6c54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:15:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:15:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["861cdd2bc7ebe1f696a48bac573347e539d5a77f911e449cb91c85494b9e6c54"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f798f88f67eb647e1bce4853cf933173bebcd49ebf41a09ca19a382de8e6bc47"} {"level":"info","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"861cdd2bc7ebe1f696a48bac573347e539d5a77f911e449cb91c85494b9e6c54","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f798f88f67eb647e1bce4853cf933173bebcd49ebf41a09ca19a382de8e6bc47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:15:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:15:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f798f88f67eb647e1bce4853cf933173bebcd49ebf41a09ca19a382de8e6bc47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/861cdd2bc7ebe1f696a48bac573347e539d5a77f911e449cb91c85494b9e6c54"} {"level":"info","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f798f88f67eb647e1bce4853cf933173bebcd49ebf41a09ca19a382de8e6bc47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"861cdd2bc7ebe1f696a48bac573347e539d5a77f911e449cb91c85494b9e6c54","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f798f88f67eb647e1bce4853cf933173bebcd49ebf41a09ca19a382de8e6bc47","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f798f88f67eb647e1bce4853cf933173bebcd49ebf41a09ca19a382de8e6bc47"} {"level":"debug","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"583bbf965dd1890a47af3754f06c74835550be9ac0ab71f33dd4d1fbc0b3c00d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:15:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:15:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/583bbf965dd1890a47af3754f06c74835550be9ac0ab71f33dd4d1fbc0b3c00d"} {"level":"info","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"583bbf965dd1890a47af3754f06c74835550be9ac0ab71f33dd4d1fbc0b3c00d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"583bbf965dd1890a47af3754f06c74835550be9ac0ab71f33dd4d1fbc0b3c00d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:15:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:15:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/583bbf965dd1890a47af3754f06c74835550be9ac0ab71f33dd4d1fbc0b3c00d"} {"level":"info","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"583bbf965dd1890a47af3754f06c74835550be9ac0ab71f33dd4d1fbc0b3c00d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"583bbf965dd1890a47af3754f06c74835550be9ac0ab71f33dd4d1fbc0b3c00d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:15:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:15:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["583bbf965dd1890a47af3754f06c74835550be9ac0ab71f33dd4d1fbc0b3c00d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"583bbf965dd1890a47af3754f06c74835550be9ac0ab71f33dd4d1fbc0b3c00d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"583bbf965dd1890a47af3754f06c74835550be9ac0ab71f33dd4d1fbc0b3c00d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"583bbf965dd1890a47af3754f06c74835550be9ac0ab71f33dd4d1fbc0b3c00d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"583bbf965dd1890a47af3754f06c74835550be9ac0ab71f33dd4d1fbc0b3c00d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/583bbf965dd1890a47af3754f06c74835550be9ac0ab71f33dd4d1fbc0b3c00d"} {"level":"debug","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"583bbf965dd1890a47af3754f06c74835550be9ac0ab71f33dd4d1fbc0b3c00d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:15:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:15:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["583bbf965dd1890a47af3754f06c74835550be9ac0ab71f33dd4d1fbc0b3c00d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"583bbf965dd1890a47af3754f06c74835550be9ac0ab71f33dd4d1fbc0b3c00d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"583bbf965dd1890a47af3754f06c74835550be9ac0ab71f33dd4d1fbc0b3c00d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f3af840b5faefe1d4291280a872e98b84eeb5eeefd837e5d91eddccc438208e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:15:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:15:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/583bbf965dd1890a47af3754f06c74835550be9ac0ab71f33dd4d1fbc0b3c00d"} {"level":"info","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f3af840b5faefe1d4291280a872e98b84eeb5eeefd837e5d91eddccc438208e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f3af840b5faefe1d4291280a872e98b84eeb5eeefd837e5d91eddccc438208e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:15:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:15:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f3af840b5faefe1d4291280a872e98b84eeb5eeefd837e5d91eddccc438208e"} {"level":"info","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f3af840b5faefe1d4291280a872e98b84eeb5eeefd837e5d91eddccc438208e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f3af840b5faefe1d4291280a872e98b84eeb5eeefd837e5d91eddccc438208e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:15:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:15:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0f3af840b5faefe1d4291280a872e98b84eeb5eeefd837e5d91eddccc438208e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0f3af840b5faefe1d4291280a872e98b84eeb5eeefd837e5d91eddccc438208e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f3af840b5faefe1d4291280a872e98b84eeb5eeefd837e5d91eddccc438208e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f3af840b5faefe1d4291280a872e98b84eeb5eeefd837e5d91eddccc438208e"} {"level":"debug","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f3af840b5faefe1d4291280a872e98b84eeb5eeefd837e5d91eddccc438208e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f3af840b5faefe1d4291280a872e98b84eeb5eeefd837e5d91eddccc438208e"} {"level":"debug","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a2a0eab8bd82a59d492bed5e26b2365aa207bd9d9672a8e85c2119764653f1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:15:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:15:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a2a0eab8bd82a59d492bed5e26b2365aa207bd9d9672a8e85c2119764653f1c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a2a0eab8bd82a59d492bed5e26b2365aa207bd9d9672a8e85c2119764653f1c"} {"level":"debug","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a2a0eab8bd82a59d492bed5e26b2365aa207bd9d9672a8e85c2119764653f1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:15:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:15:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a2a0eab8bd82a59d492bed5e26b2365aa207bd9d9672a8e85c2119764653f1c"} {"level":"info","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a2a0eab8bd82a59d492bed5e26b2365aa207bd9d9672a8e85c2119764653f1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a2a0eab8bd82a59d492bed5e26b2365aa207bd9d9672a8e85c2119764653f1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f3af840b5faefe1d4291280a872e98b84eeb5eeefd837e5d91eddccc438208e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:15:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:15:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f3af840b5faefe1d4291280a872e98b84eeb5eeefd837e5d91eddccc438208e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a2a0eab8bd82a59d492bed5e26b2365aa207bd9d9672a8e85c2119764653f1c"} {"level":"info","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f3af840b5faefe1d4291280a872e98b84eeb5eeefd837e5d91eddccc438208e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a2a0eab8bd82a59d492bed5e26b2365aa207bd9d9672a8e85c2119764653f1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:15:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:15:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a2a0eab8bd82a59d492bed5e26b2365aa207bd9d9672a8e85c2119764653f1c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a2a0eab8bd82a59d492bed5e26b2365aa207bd9d9672a8e85c2119764653f1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f3af840b5faefe1d4291280a872e98b84eeb5eeefd837e5d91eddccc438208e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:15:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:15:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:15:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f3af840b5faefe1d4291280a872e98b84eeb5eeefd837e5d91eddccc438208e"} {"level":"info","ts":"2026-07-10T21:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2475a58e71d7d5e4b52825632dbc7cf7afbda3c1aa11d03801239a4dd3e11a8"} {"level":"info","ts":"2026-07-10T21:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f3af840b5faefe1d4291280a872e98b84eeb5eeefd837e5d91eddccc438208e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2475a58e71d7d5e4b52825632dbc7cf7afbda3c1aa11d03801239a4dd3e11a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:15:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:15:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c2475a58e71d7d5e4b52825632dbc7cf7afbda3c1aa11d03801239a4dd3e11a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a2a0eab8bd82a59d492bed5e26b2365aa207bd9d9672a8e85c2119764653f1c"} {"level":"info","ts":"2026-07-10T21:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2475a58e71d7d5e4b52825632dbc7cf7afbda3c1aa11d03801239a4dd3e11a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a2a0eab8bd82a59d492bed5e26b2365aa207bd9d9672a8e85c2119764653f1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f3af840b5faefe1d4291280a872e98b84eeb5eeefd837e5d91eddccc438208e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2475a58e71d7d5e4b52825632dbc7cf7afbda3c1aa11d03801239a4dd3e11a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f3af840b5faefe1d4291280a872e98b84eeb5eeefd837e5d91eddccc438208e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f3af840b5faefe1d4291280a872e98b84eeb5eeefd837e5d91eddccc438208e"} {"level":"debug","ts":"2026-07-10T21:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f3af840b5faefe1d4291280a872e98b84eeb5eeefd837e5d91eddccc438208e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:15:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:15:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f3af840b5faefe1d4291280a872e98b84eeb5eeefd837e5d91eddccc438208e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2475a58e71d7d5e4b52825632dbc7cf7afbda3c1aa11d03801239a4dd3e11a8"} {"level":"info","ts":"2026-07-10T21:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f3af840b5faefe1d4291280a872e98b84eeb5eeefd837e5d91eddccc438208e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f3af840b5faefe1d4291280a872e98b84eeb5eeefd837e5d91eddccc438208e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:15:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f3af840b5faefe1d4291280a872e98b84eeb5eeefd837e5d91eddccc438208e"} {"level":"debug","ts":"2026-07-10T21:15:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fe60a2688b5ee1c3e927bf6a5b8cb628c393eefeb4ad351fe3381a5135b717b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:15:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:15:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:15:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fe60a2688b5ee1c3e927bf6a5b8cb628c393eefeb4ad351fe3381a5135b717b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fe60a2688b5ee1c3e927bf6a5b8cb628c393eefeb4ad351fe3381a5135b717b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fe60a2688b5ee1c3e927bf6a5b8cb628c393eefeb4ad351fe3381a5135b717b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:15:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fe60a2688b5ee1c3e927bf6a5b8cb628c393eefeb4ad351fe3381a5135b717b"} {"level":"debug","ts":"2026-07-10T21:15:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fe60a2688b5ee1c3e927bf6a5b8cb628c393eefeb4ad351fe3381a5135b717b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:15:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fe60a2688b5ee1c3e927bf6a5b8cb628c393eefeb4ad351fe3381a5135b717b"} {"level":"debug","ts":"2026-07-10T21:15:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fe60a2688b5ee1c3e927bf6a5b8cb628c393eefeb4ad351fe3381a5135b717b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:15:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:15:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3fe60a2688b5ee1c3e927bf6a5b8cb628c393eefeb4ad351fe3381a5135b717b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:15:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fe60a2688b5ee1c3e927bf6a5b8cb628c393eefeb4ad351fe3381a5135b717b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fe60a2688b5ee1c3e927bf6a5b8cb628c393eefeb4ad351fe3381a5135b717b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:15:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:15:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:15:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fe60a2688b5ee1c3e927bf6a5b8cb628c393eefeb4ad351fe3381a5135b717b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fe60a2688b5ee1c3e927bf6a5b8cb628c393eefeb4ad351fe3381a5135b717b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:15:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fe60a2688b5ee1c3e927bf6a5b8cb628c393eefeb4ad351fe3381a5135b717b"} {"level":"debug","ts":"2026-07-10T21:15:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fe60a2688b5ee1c3e927bf6a5b8cb628c393eefeb4ad351fe3381a5135b717b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:15:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fe60a2688b5ee1c3e927bf6a5b8cb628c393eefeb4ad351fe3381a5135b717b"} {"level":"debug","ts":"2026-07-10T21:15:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fe60a2688b5ee1c3e927bf6a5b8cb628c393eefeb4ad351fe3381a5135b717b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:15:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:15:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3fe60a2688b5ee1c3e927bf6a5b8cb628c393eefeb4ad351fe3381a5135b717b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:15:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fe60a2688b5ee1c3e927bf6a5b8cb628c393eefeb4ad351fe3381a5135b717b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fe60a2688b5ee1c3e927bf6a5b8cb628c393eefeb4ad351fe3381a5135b717b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:15:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:15:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:15:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fe60a2688b5ee1c3e927bf6a5b8cb628c393eefeb4ad351fe3381a5135b717b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fe60a2688b5ee1c3e927bf6a5b8cb628c393eefeb4ad351fe3381a5135b717b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:15:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fe60a2688b5ee1c3e927bf6a5b8cb628c393eefeb4ad351fe3381a5135b717b"} {"level":"debug","ts":"2026-07-10T21:15:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fe60a2688b5ee1c3e927bf6a5b8cb628c393eefeb4ad351fe3381a5135b717b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75c8af7100d52c24189d533bf124c8e0e83458f848eb815e2fd5c424e15dd08e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:15:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fe60a2688b5ee1c3e927bf6a5b8cb628c393eefeb4ad351fe3381a5135b717b"} {"level":"debug","ts":"2026-07-10T21:15:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fe60a2688b5ee1c3e927bf6a5b8cb628c393eefeb4ad351fe3381a5135b717b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:15:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:15:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3fe60a2688b5ee1c3e927bf6a5b8cb628c393eefeb4ad351fe3381a5135b717b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:15:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75c8af7100d52c24189d533bf124c8e0e83458f848eb815e2fd5c424e15dd08e"} {"level":"info","ts":"2026-07-10T21:15:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fe60a2688b5ee1c3e927bf6a5b8cb628c393eefeb4ad351fe3381a5135b717b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fe60a2688b5ee1c3e927bf6a5b8cb628c393eefeb4ad351fe3381a5135b717b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:15:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:15:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:15:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fe60a2688b5ee1c3e927bf6a5b8cb628c393eefeb4ad351fe3381a5135b717b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fe60a2688b5ee1c3e927bf6a5b8cb628c393eefeb4ad351fe3381a5135b717b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:15:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fe60a2688b5ee1c3e927bf6a5b8cb628c393eefeb4ad351fe3381a5135b717b"} {"level":"debug","ts":"2026-07-10T21:15:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fe60a2688b5ee1c3e927bf6a5b8cb628c393eefeb4ad351fe3381a5135b717b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fe60a2688b5ee1c3e927bf6a5b8cb628c393eefeb4ad351fe3381a5135b717b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:15:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fe60a2688b5ee1c3e927bf6a5b8cb628c393eefeb4ad351fe3381a5135b717b"} {"level":"debug","ts":"2026-07-10T21:15:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fe60a2688b5ee1c3e927bf6a5b8cb628c393eefeb4ad351fe3381a5135b717b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:15:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:15:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3fe60a2688b5ee1c3e927bf6a5b8cb628c393eefeb4ad351fe3381a5135b717b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:15:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fe60a2688b5ee1c3e927bf6a5b8cb628c393eefeb4ad351fe3381a5135b717b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fe60a2688b5ee1c3e927bf6a5b8cb628c393eefeb4ad351fe3381a5135b717b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:15:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fe60a2688b5ee1c3e927bf6a5b8cb628c393eefeb4ad351fe3381a5135b717b"} {"level":"debug","ts":"2026-07-10T21:15:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad4438427a5982ac7d60d6e6703d631648dc3fd868926b6b3638a5b40fad8d4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:15:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:15:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:15:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad4438427a5982ac7d60d6e6703d631648dc3fd868926b6b3638a5b40fad8d4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad4438427a5982ac7d60d6e6703d631648dc3fd868926b6b3638a5b40fad8d4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad4438427a5982ac7d60d6e6703d631648dc3fd868926b6b3638a5b40fad8d4a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:15:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad4438427a5982ac7d60d6e6703d631648dc3fd868926b6b3638a5b40fad8d4a"} {"level":"debug","ts":"2026-07-10T21:15:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad4438427a5982ac7d60d6e6703d631648dc3fd868926b6b3638a5b40fad8d4a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:15:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad4438427a5982ac7d60d6e6703d631648dc3fd868926b6b3638a5b40fad8d4a"} {"level":"debug","ts":"2026-07-10T21:15:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad4438427a5982ac7d60d6e6703d631648dc3fd868926b6b3638a5b40fad8d4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:15:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:15:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad4438427a5982ac7d60d6e6703d631648dc3fd868926b6b3638a5b40fad8d4a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:15:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad4438427a5982ac7d60d6e6703d631648dc3fd868926b6b3638a5b40fad8d4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad4438427a5982ac7d60d6e6703d631648dc3fd868926b6b3638a5b40fad8d4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:15:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:15:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:15:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad4438427a5982ac7d60d6e6703d631648dc3fd868926b6b3638a5b40fad8d4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a2a0eab8bd82a59d492bed5e26b2365aa207bd9d9672a8e85c2119764653f1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad4438427a5982ac7d60d6e6703d631648dc3fd868926b6b3638a5b40fad8d4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad4438427a5982ac7d60d6e6703d631648dc3fd868926b6b3638a5b40fad8d4a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad4438427a5982ac7d60d6e6703d631648dc3fd868926b6b3638a5b40fad8d4a"} {"level":"debug","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad4438427a5982ac7d60d6e6703d631648dc3fd868926b6b3638a5b40fad8d4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:15:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:15:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad4438427a5982ac7d60d6e6703d631648dc3fd868926b6b3638a5b40fad8d4a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a2a0eab8bd82a59d492bed5e26b2365aa207bd9d9672a8e85c2119764653f1c"} {"level":"info","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad4438427a5982ac7d60d6e6703d631648dc3fd868926b6b3638a5b40fad8d4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad4438427a5982ac7d60d6e6703d631648dc3fd868926b6b3638a5b40fad8d4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:15:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:15:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad4438427a5982ac7d60d6e6703d631648dc3fd868926b6b3638a5b40fad8d4a"} {"level":"info","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad4438427a5982ac7d60d6e6703d631648dc3fd868926b6b3638a5b40fad8d4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad4438427a5982ac7d60d6e6703d631648dc3fd868926b6b3638a5b40fad8d4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad4438427a5982ac7d60d6e6703d631648dc3fd868926b6b3638a5b40fad8d4a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad4438427a5982ac7d60d6e6703d631648dc3fd868926b6b3638a5b40fad8d4a"} {"level":"debug","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad4438427a5982ac7d60d6e6703d631648dc3fd868926b6b3638a5b40fad8d4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57dea3d8fd23cd690dfb4e4e7f2713bd6b43347e494ed9c3a93295c590e4c985","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad4438427a5982ac7d60d6e6703d631648dc3fd868926b6b3638a5b40fad8d4a"} {"level":"info","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57dea3d8fd23cd690dfb4e4e7f2713bd6b43347e494ed9c3a93295c590e4c985"} {"level":"debug","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad4438427a5982ac7d60d6e6703d631648dc3fd868926b6b3638a5b40fad8d4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:15:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:15:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad4438427a5982ac7d60d6e6703d631648dc3fd868926b6b3638a5b40fad8d4a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad4438427a5982ac7d60d6e6703d631648dc3fd868926b6b3638a5b40fad8d4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad4438427a5982ac7d60d6e6703d631648dc3fd868926b6b3638a5b40fad8d4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:15:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:15:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad4438427a5982ac7d60d6e6703d631648dc3fd868926b6b3638a5b40fad8d4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad4438427a5982ac7d60d6e6703d631648dc3fd868926b6b3638a5b40fad8d4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad4438427a5982ac7d60d6e6703d631648dc3fd868926b6b3638a5b40fad8d4a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad4438427a5982ac7d60d6e6703d631648dc3fd868926b6b3638a5b40fad8d4a"} {"level":"debug","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfaef856ecf265448e7736b6ac0397b2cb57cfc9560fa209eefd18ddf1c15590","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad4438427a5982ac7d60d6e6703d631648dc3fd868926b6b3638a5b40fad8d4a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad4438427a5982ac7d60d6e6703d631648dc3fd868926b6b3638a5b40fad8d4a"} {"level":"info","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfaef856ecf265448e7736b6ac0397b2cb57cfc9560fa209eefd18ddf1c15590"} {"level":"debug","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad4438427a5982ac7d60d6e6703d631648dc3fd868926b6b3638a5b40fad8d4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:15:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:15:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad4438427a5982ac7d60d6e6703d631648dc3fd868926b6b3638a5b40fad8d4a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad4438427a5982ac7d60d6e6703d631648dc3fd868926b6b3638a5b40fad8d4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad4438427a5982ac7d60d6e6703d631648dc3fd868926b6b3638a5b40fad8d4a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad4438427a5982ac7d60d6e6703d631648dc3fd868926b6b3638a5b40fad8d4a"} {"level":"debug","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0eb4634a717986c0299231f4d749611cd8dcb5934783ee762933ee02f9a27d80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:15:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:15:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0eb4634a717986c0299231f4d749611cd8dcb5934783ee762933ee02f9a27d80","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0eb4634a717986c0299231f4d749611cd8dcb5934783ee762933ee02f9a27d80","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0eb4634a717986c0299231f4d749611cd8dcb5934783ee762933ee02f9a27d80","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0eb4634a717986c0299231f4d749611cd8dcb5934783ee762933ee02f9a27d80"} {"level":"debug","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0eb4634a717986c0299231f4d749611cd8dcb5934783ee762933ee02f9a27d80","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0eb4634a717986c0299231f4d749611cd8dcb5934783ee762933ee02f9a27d80"} {"level":"debug","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0eb4634a717986c0299231f4d749611cd8dcb5934783ee762933ee02f9a27d80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:15:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:15:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0eb4634a717986c0299231f4d749611cd8dcb5934783ee762933ee02f9a27d80"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0eb4634a717986c0299231f4d749611cd8dcb5934783ee762933ee02f9a27d80","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"379052ef4b75a254113da3aae9eefd2364c6fb1f95e28f6134d3d31f8174b730","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:15:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:15:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"379052ef4b75a254113da3aae9eefd2364c6fb1f95e28f6134d3d31f8174b730","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0eb4634a717986c0299231f4d749611cd8dcb5934783ee762933ee02f9a27d80","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"379052ef4b75a254113da3aae9eefd2364c6fb1f95e28f6134d3d31f8174b730","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/379052ef4b75a254113da3aae9eefd2364c6fb1f95e28f6134d3d31f8174b730"} {"level":"debug","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"379052ef4b75a254113da3aae9eefd2364c6fb1f95e28f6134d3d31f8174b730","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:15:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:15:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["379052ef4b75a254113da3aae9eefd2364c6fb1f95e28f6134d3d31f8174b730"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"379052ef4b75a254113da3aae9eefd2364c6fb1f95e28f6134d3d31f8174b730","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d5e13305c623be1a8bb1de78887e5c963d52e18bcf9a0aae701135c35ef921d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"379052ef4b75a254113da3aae9eefd2364c6fb1f95e28f6134d3d31f8174b730","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0eb4634a717986c0299231f4d749611cd8dcb5934783ee762933ee02f9a27d80"} {"level":"info","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/379052ef4b75a254113da3aae9eefd2364c6fb1f95e28f6134d3d31f8174b730"} {"level":"info","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d5e13305c623be1a8bb1de78887e5c963d52e18bcf9a0aae701135c35ef921d"} {"level":"debug","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"583bbf965dd1890a47af3754f06c74835550be9ac0ab71f33dd4d1fbc0b3c00d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:15:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:15:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"583bbf965dd1890a47af3754f06c74835550be9ac0ab71f33dd4d1fbc0b3c00d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"583bbf965dd1890a47af3754f06c74835550be9ac0ab71f33dd4d1fbc0b3c00d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"583bbf965dd1890a47af3754f06c74835550be9ac0ab71f33dd4d1fbc0b3c00d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"583bbf965dd1890a47af3754f06c74835550be9ac0ab71f33dd4d1fbc0b3c00d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/583bbf965dd1890a47af3754f06c74835550be9ac0ab71f33dd4d1fbc0b3c00d"} {"level":"debug","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"583bbf965dd1890a47af3754f06c74835550be9ac0ab71f33dd4d1fbc0b3c00d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c093841747c8e65349beff3a8bc4a83ac5c1b41e87a1bfda733abb25c8932103","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/583bbf965dd1890a47af3754f06c74835550be9ac0ab71f33dd4d1fbc0b3c00d"} {"level":"debug","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"861cdd2bc7ebe1f696a48bac573347e539d5a77f911e449cb91c85494b9e6c54","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c093841747c8e65349beff3a8bc4a83ac5c1b41e87a1bfda733abb25c8932103"} {"level":"info","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/861cdd2bc7ebe1f696a48bac573347e539d5a77f911e449cb91c85494b9e6c54"} {"level":"debug","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"583bbf965dd1890a47af3754f06c74835550be9ac0ab71f33dd4d1fbc0b3c00d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:15:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:15:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["583bbf965dd1890a47af3754f06c74835550be9ac0ab71f33dd4d1fbc0b3c00d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"583bbf965dd1890a47af3754f06c74835550be9ac0ab71f33dd4d1fbc0b3c00d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"583bbf965dd1890a47af3754f06c74835550be9ac0ab71f33dd4d1fbc0b3c00d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/583bbf965dd1890a47af3754f06c74835550be9ac0ab71f33dd4d1fbc0b3c00d"} {"level":"debug","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e37e76897e1eb8db22ee2808f5b33f1fc8832d466d679334c031358081190534","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:15:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:15:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e37e76897e1eb8db22ee2808f5b33f1fc8832d466d679334c031358081190534","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e37e76897e1eb8db22ee2808f5b33f1fc8832d466d679334c031358081190534","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2475a58e71d7d5e4b52825632dbc7cf7afbda3c1aa11d03801239a4dd3e11a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e37e76897e1eb8db22ee2808f5b33f1fc8832d466d679334c031358081190534","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e37e76897e1eb8db22ee2808f5b33f1fc8832d466d679334c031358081190534"} {"level":"debug","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e37e76897e1eb8db22ee2808f5b33f1fc8832d466d679334c031358081190534","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:15:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:15:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e37e76897e1eb8db22ee2808f5b33f1fc8832d466d679334c031358081190534"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2475a58e71d7d5e4b52825632dbc7cf7afbda3c1aa11d03801239a4dd3e11a8"} {"level":"info","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e37e76897e1eb8db22ee2808f5b33f1fc8832d466d679334c031358081190534","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e37e76897e1eb8db22ee2808f5b33f1fc8832d466d679334c031358081190534","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:15:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:15:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e37e76897e1eb8db22ee2808f5b33f1fc8832d466d679334c031358081190534"} {"level":"info","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e37e76897e1eb8db22ee2808f5b33f1fc8832d466d679334c031358081190534","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e37e76897e1eb8db22ee2808f5b33f1fc8832d466d679334c031358081190534","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e37e76897e1eb8db22ee2808f5b33f1fc8832d466d679334c031358081190534","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e37e76897e1eb8db22ee2808f5b33f1fc8832d466d679334c031358081190534"} {"level":"debug","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e37e76897e1eb8db22ee2808f5b33f1fc8832d466d679334c031358081190534","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:15:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e37e76897e1eb8db22ee2808f5b33f1fc8832d466d679334c031358081190534"} {"level":"debug","ts":"2026-07-10T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e37e76897e1eb8db22ee2808f5b33f1fc8832d466d679334c031358081190534","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:15:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:15:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e37e76897e1eb8db22ee2808f5b33f1fc8832d466d679334c031358081190534"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e37e76897e1eb8db22ee2808f5b33f1fc8832d466d679334c031358081190534","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e37e76897e1eb8db22ee2808f5b33f1fc8832d466d679334c031358081190534","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:15:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:15:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e37e76897e1eb8db22ee2808f5b33f1fc8832d466d679334c031358081190534","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e37e76897e1eb8db22ee2808f5b33f1fc8832d466d679334c031358081190534","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e37e76897e1eb8db22ee2808f5b33f1fc8832d466d679334c031358081190534","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e37e76897e1eb8db22ee2808f5b33f1fc8832d466d679334c031358081190534"} {"level":"debug","ts":"2026-07-10T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e37e76897e1eb8db22ee2808f5b33f1fc8832d466d679334c031358081190534","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e37e76897e1eb8db22ee2808f5b33f1fc8832d466d679334c031358081190534"} {"level":"debug","ts":"2026-07-10T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e37e76897e1eb8db22ee2808f5b33f1fc8832d466d679334c031358081190534","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:15:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:15:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e37e76897e1eb8db22ee2808f5b33f1fc8832d466d679334c031358081190534"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e37e76897e1eb8db22ee2808f5b33f1fc8832d466d679334c031358081190534","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e37e76897e1eb8db22ee2808f5b33f1fc8832d466d679334c031358081190534","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e37e76897e1eb8db22ee2808f5b33f1fc8832d466d679334c031358081190534"} {"level":"debug","ts":"2026-07-10T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7a7c86bc4874b23f72baba6565555819e4e82953b61fde321ff4ee9ab8da92a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7a7c86bc4874b23f72baba6565555819e4e82953b61fde321ff4ee9ab8da92a"} {"level":"debug","ts":"2026-07-10T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff9909f1bba64083306f4b7c5bbc7c2086c2423b87206dc9f8d12f7adbb4cc04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:15:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:15:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff9909f1bba64083306f4b7c5bbc7c2086c2423b87206dc9f8d12f7adbb4cc04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8eee558a6e1b3624d4065fc7008e112d07d12000aeba9ec4e0bbb69202e0afe6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff9909f1bba64083306f4b7c5bbc7c2086c2423b87206dc9f8d12f7adbb4cc04","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff9909f1bba64083306f4b7c5bbc7c2086c2423b87206dc9f8d12f7adbb4cc04"} {"level":"debug","ts":"2026-07-10T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff9909f1bba64083306f4b7c5bbc7c2086c2423b87206dc9f8d12f7adbb4cc04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:15:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:15:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff9909f1bba64083306f4b7c5bbc7c2086c2423b87206dc9f8d12f7adbb4cc04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff9909f1bba64083306f4b7c5bbc7c2086c2423b87206dc9f8d12f7adbb4cc04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f3af840b5faefe1d4291280a872e98b84eeb5eeefd837e5d91eddccc438208e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff9909f1bba64083306f4b7c5bbc7c2086c2423b87206dc9f8d12f7adbb4cc04","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8eee558a6e1b3624d4065fc7008e112d07d12000aeba9ec4e0bbb69202e0afe6"} {"level":"debug","ts":"2026-07-10T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f96b2f83dc390dbb468835ea0c8e0d2432deda80a89b7c2c6a9f7975c5a65721","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff9909f1bba64083306f4b7c5bbc7c2086c2423b87206dc9f8d12f7adbb4cc04"} {"level":"debug","ts":"2026-07-10T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61f61e6aff905dc0ce7b80643d6412dfbd5141c8c23a8b21248207e929dcda7a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f3af840b5faefe1d4291280a872e98b84eeb5eeefd837e5d91eddccc438208e"} {"level":"debug","ts":"2026-07-10T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f798f88f67eb647e1bce4853cf933173bebcd49ebf41a09ca19a382de8e6bc47","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f96b2f83dc390dbb468835ea0c8e0d2432deda80a89b7c2c6a9f7975c5a65721"} {"level":"debug","ts":"2026-07-10T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dda979ecbc2fddf9870d357957b42eef8f88cc49ca5bc932403aa3ae97eb0af7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5acad8ae36f752c94f378408bb08276b7df2488b15e82ccda715122d0d70e98","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61f61e6aff905dc0ce7b80643d6412dfbd5141c8c23a8b21248207e929dcda7a"} {"level":"debug","ts":"2026-07-10T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3255dd9d669c5016b79953dcb3972854fbd8e2dab48449ec49ca84500f1dda91","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f798f88f67eb647e1bce4853cf933173bebcd49ebf41a09ca19a382de8e6bc47"} {"level":"info","ts":"2026-07-10T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dda979ecbc2fddf9870d357957b42eef8f88cc49ca5bc932403aa3ae97eb0af7"} {"level":"info","ts":"2026-07-10T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5acad8ae36f752c94f378408bb08276b7df2488b15e82ccda715122d0d70e98"} {"level":"info","ts":"2026-07-10T21:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3255dd9d669c5016b79953dcb3972854fbd8e2dab48449ec49ca84500f1dda91"} {"level":"info","ts":"2026-07-10T21:15:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"834a6644-e342-4388-a37f-d05de6914f48","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:53758","PortSpecifier":{"PortValue":53758}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"834a6644-e342-4388-a37f-d05de6914f48","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-01037d.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T21:15:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"834a6644-e342-4388-a37f-d05de6914f48","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:53758","PortSpecifier":{"PortValue":53758}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783718136,"nanos":180860667},"http":{"id":"834a6644-e342-4388-a37f-d05de6914f48","method":"POST","headers":{":authority":"e2e-shared-a-01037d.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:15:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"834a6644-e342-4388-a37f-d05de6914f48","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T21:15:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"834a6644-e342-4388-a37f-d05de6914f48","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5c8ab2d5-ac60-492f-9b62-36f585e148c2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f392fc79-4b6b-4571-a559-64ef3c7b3566"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2f28d6eab427"]}} {"level":"debug","ts":"2026-07-10T21:15:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"834a6644-e342-4388-a37f-d05de6914f48","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2f28d6eab427"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f392fc79-4b6b-4571-a559-64ef3c7b3566"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5c8ab2d5-ac60-492f-9b62-36f585e148c2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8eee558a6e1b3624d4065fc7008e112d07d12000aeba9ec4e0bbb69202e0afe6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-01037d.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:15:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"834a6644-e342-4388-a37f-d05de6914f48","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:15:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"834a6644-e342-4388-a37f-d05de6914f48","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:15:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"834a6644-e342-4388-a37f-d05de6914f48","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-01037d/sub-test-model-01037d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:15:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"834a6644-e342-4388-a37f-d05de6914f48","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T21:15:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"834a6644-e342-4388-a37f-d05de6914f48","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T21:15:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"834a6644-e342-4388-a37f-d05de6914f48","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-10T21:15:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"834a6644-e342-4388-a37f-d05de6914f48","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T21:15:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"834a6644-e342-4388-a37f-d05de6914f48","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T21:15:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"18480de3-b317-483c-a357-a11ecfd68971","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:40336","PortSpecifier":{"PortValue":40336}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"18480de3-b317-483c-a357-a11ecfd68971","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e63f46.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T21:15:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"18480de3-b317-483c-a357-a11ecfd68971","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:40336","PortSpecifier":{"PortValue":40336}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783718136,"nanos":221095370},"http":{"id":"18480de3-b317-483c-a357-a11ecfd68971","method":"POST","headers":{":authority":"e2e-shared-b-e63f46.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:15:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"18480de3-b317-483c-a357-a11ecfd68971","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T21:15:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"18480de3-b317-483c-a357-a11ecfd68971","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5c8ab2d5-ac60-492f-9b62-36f585e148c2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f392fc79-4b6b-4571-a559-64ef3c7b3566"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2f28d6eab427"]}} {"level":"debug","ts":"2026-07-10T21:15:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"18480de3-b317-483c-a357-a11ecfd68971","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2f28d6eab427"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f392fc79-4b6b-4571-a559-64ef3c7b3566"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5c8ab2d5-ac60-492f-9b62-36f585e148c2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"57dea3d8fd23cd690dfb4e4e7f2713bd6b43347e494ed9c3a93295c590e4c985"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e63f46.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:15:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"18480de3-b317-483c-a357-a11ecfd68971","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:15:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"18480de3-b317-483c-a357-a11ecfd68971","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:15:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"18480de3-b317-483c-a357-a11ecfd68971","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e63f46/sub-test-model-e63f46\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:15:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"18480de3-b317-483c-a357-a11ecfd68971","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T21:15:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"18480de3-b317-483c-a357-a11ecfd68971","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T21:15:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"18480de3-b317-483c-a357-a11ecfd68971","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T21:15:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"18480de3-b317-483c-a357-a11ecfd68971","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T21:15:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"18480de3-b317-483c-a357-a11ecfd68971","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T21:15:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b0e8d50f-eb8d-43d2-a343-bc2dd087050a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:53760","PortSpecifier":{"PortValue":53760}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b0e8d50f-eb8d-43d2-a343-bc2dd087050a","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-01037d.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T21:15:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b0e8d50f-eb8d-43d2-a343-bc2dd087050a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:53760","PortSpecifier":{"PortValue":53760}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783718136,"nanos":265716439},"http":{"id":"b0e8d50f-eb8d-43d2-a343-bc2dd087050a","method":"GET","headers":{":authority":"e2e-shared-a-01037d.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:15:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b0e8d50f-eb8d-43d2-a343-bc2dd087050a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-zNgFL7rmveabYrMy_A38qNLfOZ6qvZfZSxHsNxXJZsLPWn0COkFcC6l2yJ4Z"} {"level":"debug","ts":"2026-07-10T21:15:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b0e8d50f-eb8d-43d2-a343-bc2dd087050a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-01037d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-zNgFL7rmveabYrMy_A38qNLfOZ6qvZfZSxHsNxXJZsLPWn0COkFcC6l2yJ4Z\"}"} {"level":"debug","ts":"2026-07-10T21:15:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b0e8d50f-eb8d-43d2-a343-bc2dd087050a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-01037d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ae305cff-626b-4e91-9fba-2fa2542dc87c","keyName":"e2e-sub-iso-97acf2","subscription":"e2e-a-only-5a2d92","tenant":"e2e-shared-a-01037d","userId":"ae305cff-626b-4e91-9fba-2fa2542dc87c","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T21:15:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b0e8d50f-eb8d-43d2-a343-bc2dd087050a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:15:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b0e8d50f-eb8d-43d2-a343-bc2dd087050a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:15:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b0e8d50f-eb8d-43d2-a343-bc2dd087050a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:15:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b0e8d50f-eb8d-43d2-a343-bc2dd087050a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-01037d/sub-test-model-01037d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:15:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b0e8d50f-eb8d-43d2-a343-bc2dd087050a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-5a2d92"} {"level":"debug","ts":"2026-07-10T21:15:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b0e8d50f-eb8d-43d2-a343-bc2dd087050a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-10T21:15:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b0e8d50f-eb8d-43d2-a343-bc2dd087050a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T21:15:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b0e8d50f-eb8d-43d2-a343-bc2dd087050a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-10T21:15:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b0e8d50f-eb8d-43d2-a343-bc2dd087050a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T21:15:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b0e8d50f-eb8d-43d2-a343-bc2dd087050a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T21:15:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2ac5b389-e54d-4562-b161-e3434fd23448","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:40350","PortSpecifier":{"PortValue":40350}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2ac5b389-e54d-4562-b161-e3434fd23448","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-e63f46.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T21:15:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2ac5b389-e54d-4562-b161-e3434fd23448","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:40350","PortSpecifier":{"PortValue":40350}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783718136,"nanos":304248505},"http":{"id":"2ac5b389-e54d-4562-b161-e3434fd23448","method":"GET","headers":{":authority":"e2e-shared-b-e63f46.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:15:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2ac5b389-e54d-4562-b161-e3434fd23448","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Q2F7coPD6Zsk6Bkw_cOxrRDAfpn9JtUAPMuWHREKhCpWQFViegOieZti4afB"} {"level":"debug","ts":"2026-07-10T21:15:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2ac5b389-e54d-4562-b161-e3434fd23448","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-e63f46.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Q2F7coPD6Zsk6Bkw_cOxrRDAfpn9JtUAPMuWHREKhCpWQFViegOieZti4afB\"}"} {"level":"debug","ts":"2026-07-10T21:15:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2ac5b389-e54d-4562-b161-e3434fd23448","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-e63f46.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b79368eb-66b7-4184-83bc-fd3491c9f666","keyName":"e2e-sub-iso-abbe4f","subscription":"e2e-b-only-5a2d92","tenant":"e2e-shared-b-e63f46","userId":"b79368eb-66b7-4184-83bc-fd3491c9f666","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T21:15:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2ac5b389-e54d-4562-b161-e3434fd23448","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:15:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ac5b389-e54d-4562-b161-e3434fd23448","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:15:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ac5b389-e54d-4562-b161-e3434fd23448","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:15:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ac5b389-e54d-4562-b161-e3434fd23448","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e63f46/sub-test-model-e63f46\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:15:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2ac5b389-e54d-4562-b161-e3434fd23448","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-10T21:15:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ac5b389-e54d-4562-b161-e3434fd23448","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T21:15:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ac5b389-e54d-4562-b161-e3434fd23448","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-5a2d92"} {"level":"debug","ts":"2026-07-10T21:15:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ac5b389-e54d-4562-b161-e3434fd23448","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T21:15:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2ac5b389-e54d-4562-b161-e3434fd23448","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T21:15:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2ac5b389-e54d-4562-b161-e3434fd23448","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T21:15:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0807b5ac-3428-4435-8dd2-777520c184cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:49044","PortSpecifier":{"PortValue":49044}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0807b5ac-3428-4435-8dd2-777520c184cd","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-01037d.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T21:15:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0807b5ac-3428-4435-8dd2-777520c184cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:49044","PortSpecifier":{"PortValue":49044}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783718146,"nanos":403757601},"http":{"id":"0807b5ac-3428-4435-8dd2-777520c184cd","method":"POST","headers":{":authority":"e2e-shared-a-01037d.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:15:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0807b5ac-3428-4435-8dd2-777520c184cd","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T21:15:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0807b5ac-3428-4435-8dd2-777520c184cd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5c8ab2d5-ac60-492f-9b62-36f585e148c2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f392fc79-4b6b-4571-a559-64ef3c7b3566"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2f28d6eab427"]}} {"level":"debug","ts":"2026-07-10T21:15:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0807b5ac-3428-4435-8dd2-777520c184cd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2f28d6eab427"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f392fc79-4b6b-4571-a559-64ef3c7b3566"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5c8ab2d5-ac60-492f-9b62-36f585e148c2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8eee558a6e1b3624d4065fc7008e112d07d12000aeba9ec4e0bbb69202e0afe6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-01037d.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:15:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0807b5ac-3428-4435-8dd2-777520c184cd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:15:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0807b5ac-3428-4435-8dd2-777520c184cd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:15:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0807b5ac-3428-4435-8dd2-777520c184cd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-01037d/sub-test-model-01037d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:15:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0807b5ac-3428-4435-8dd2-777520c184cd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T21:15:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0807b5ac-3428-4435-8dd2-777520c184cd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T21:15:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0807b5ac-3428-4435-8dd2-777520c184cd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T21:15:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0807b5ac-3428-4435-8dd2-777520c184cd","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T21:15:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0807b5ac-3428-4435-8dd2-777520c184cd","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T21:15:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c77f7e4e-ed1c-47e6-8c31-6cd7301a7fbe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:59130","PortSpecifier":{"PortValue":59130}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c77f7e4e-ed1c-47e6-8c31-6cd7301a7fbe","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e63f46.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T21:15:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c77f7e4e-ed1c-47e6-8c31-6cd7301a7fbe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:59130","PortSpecifier":{"PortValue":59130}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783718146,"nanos":437569882},"http":{"id":"c77f7e4e-ed1c-47e6-8c31-6cd7301a7fbe","method":"POST","headers":{":authority":"e2e-shared-b-e63f46.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:15:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c77f7e4e-ed1c-47e6-8c31-6cd7301a7fbe","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T21:15:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c77f7e4e-ed1c-47e6-8c31-6cd7301a7fbe","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5c8ab2d5-ac60-492f-9b62-36f585e148c2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f392fc79-4b6b-4571-a559-64ef3c7b3566"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2f28d6eab427"]}} {"level":"debug","ts":"2026-07-10T21:15:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c77f7e4e-ed1c-47e6-8c31-6cd7301a7fbe","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2f28d6eab427"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f392fc79-4b6b-4571-a559-64ef3c7b3566"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5c8ab2d5-ac60-492f-9b62-36f585e148c2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"57dea3d8fd23cd690dfb4e4e7f2713bd6b43347e494ed9c3a93295c590e4c985"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e63f46.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:15:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c77f7e4e-ed1c-47e6-8c31-6cd7301a7fbe","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:15:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c77f7e4e-ed1c-47e6-8c31-6cd7301a7fbe","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:15:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c77f7e4e-ed1c-47e6-8c31-6cd7301a7fbe","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e63f46/sub-test-model-e63f46\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:15:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c77f7e4e-ed1c-47e6-8c31-6cd7301a7fbe","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T21:15:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c77f7e4e-ed1c-47e6-8c31-6cd7301a7fbe","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T21:15:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c77f7e4e-ed1c-47e6-8c31-6cd7301a7fbe","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T21:15:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c77f7e4e-ed1c-47e6-8c31-6cd7301a7fbe","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T21:15:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c77f7e4e-ed1c-47e6-8c31-6cd7301a7fbe","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T21:15:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"79eba8cd-b8dc-4566-a390-6f92abcf9f2c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:49048","PortSpecifier":{"PortValue":49048}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"79eba8cd-b8dc-4566-a390-6f92abcf9f2c","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-01037d.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T21:15:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"79eba8cd-b8dc-4566-a390-6f92abcf9f2c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:49048","PortSpecifier":{"PortValue":49048}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783718146,"nanos":467737606},"http":{"id":"79eba8cd-b8dc-4566-a390-6f92abcf9f2c","method":"POST","headers":{":authority":"e2e-shared-a-01037d.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:15:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"79eba8cd-b8dc-4566-a390-6f92abcf9f2c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-11Re7xzAVdvKAMTGB_DSKC77aUmROyq5B4b47QBQXD5i65BREwg2DtZ0Qe2Wb"} {"level":"debug","ts":"2026-07-10T21:15:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"79eba8cd-b8dc-4566-a390-6f92abcf9f2c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-01037d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-11Re7xzAVdvKAMTGB_DSKC77aUmROyq5B4b47QBQXD5i65BREwg2DtZ0Qe2Wb\"}"} {"level":"debug","ts":"2026-07-10T21:15:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"79eba8cd-b8dc-4566-a390-6f92abcf9f2c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-01037d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c1a5237c-1a11-4378-93d4-b46a6dcf1807","keyName":"e2e-sub-iso-8a13a4","subscription":"e2e-shared-sub-a21dc6","tenant":"e2e-shared-a-01037d","userId":"c1a5237c-1a11-4378-93d4-b46a6dcf1807","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T21:15:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"79eba8cd-b8dc-4566-a390-6f92abcf9f2c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:15:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79eba8cd-b8dc-4566-a390-6f92abcf9f2c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:15:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79eba8cd-b8dc-4566-a390-6f92abcf9f2c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:15:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79eba8cd-b8dc-4566-a390-6f92abcf9f2c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-01037d/sub-test-model-01037d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:15:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"79eba8cd-b8dc-4566-a390-6f92abcf9f2c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-10T21:15:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79eba8cd-b8dc-4566-a390-6f92abcf9f2c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T21:15:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79eba8cd-b8dc-4566-a390-6f92abcf9f2c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T21:15:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79eba8cd-b8dc-4566-a390-6f92abcf9f2c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-a21dc6"} {"level":"info","ts":"2026-07-10T21:15:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"79eba8cd-b8dc-4566-a390-6f92abcf9f2c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T21:15:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"79eba8cd-b8dc-4566-a390-6f92abcf9f2c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T21:15:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1c059029-080d-42b7-ae54-7f4401b9ba0b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:59142","PortSpecifier":{"PortValue":59142}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1c059029-080d-42b7-ae54-7f4401b9ba0b","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-e63f46.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T21:15:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1c059029-080d-42b7-ae54-7f4401b9ba0b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:59142","PortSpecifier":{"PortValue":59142}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783718146,"nanos":500248294},"http":{"id":"1c059029-080d-42b7-ae54-7f4401b9ba0b","method":"POST","headers":{":authority":"e2e-shared-b-e63f46.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:15:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1c059029-080d-42b7-ae54-7f4401b9ba0b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1VDE0idFRhw2ymtyU_DBSHPUROO7ziFMrRy1MVHu0VXft8xLEwmTWQkwaGk00"} {"level":"debug","ts":"2026-07-10T21:15:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1c059029-080d-42b7-ae54-7f4401b9ba0b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-e63f46.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1VDE0idFRhw2ymtyU_DBSHPUROO7ziFMrRy1MVHu0VXft8xLEwmTWQkwaGk00\"}"} {"level":"debug","ts":"2026-07-10T21:15:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1c059029-080d-42b7-ae54-7f4401b9ba0b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-e63f46.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6654c917-e1d2-404b-acb5-95210445b827","keyName":"e2e-sub-iso-cceb2c","subscription":"e2e-shared-sub-a21dc6","tenant":"e2e-shared-b-e63f46","userId":"6654c917-e1d2-404b-acb5-95210445b827","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T21:15:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1c059029-080d-42b7-ae54-7f4401b9ba0b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:15:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c059029-080d-42b7-ae54-7f4401b9ba0b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:15:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c059029-080d-42b7-ae54-7f4401b9ba0b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:15:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c059029-080d-42b7-ae54-7f4401b9ba0b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e63f46/sub-test-model-e63f46\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:15:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1c059029-080d-42b7-ae54-7f4401b9ba0b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T21:15:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1c059029-080d-42b7-ae54-7f4401b9ba0b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-10T21:15:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1c059029-080d-42b7-ae54-7f4401b9ba0b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T21:15:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1c059029-080d-42b7-ae54-7f4401b9ba0b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-a21dc6"} {"level":"info","ts":"2026-07-10T21:15:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1c059029-080d-42b7-ae54-7f4401b9ba0b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T21:15:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1c059029-080d-42b7-ae54-7f4401b9ba0b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T21:16:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0eb4634a717986c0299231f4d749611cd8dcb5934783ee762933ee02f9a27d80"} {"level":"info","ts":"2026-07-10T21:16:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c5acad8ae36f752c94f378408bb08276b7df2488b15e82ccda715122d0d70e98"} {"level":"info","ts":"2026-07-10T21:16:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2d5e13305c623be1a8bb1de78887e5c963d52e18bcf9a0aae701135c35ef921d"} {"level":"info","ts":"2026-07-10T21:16:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3fe60a2688b5ee1c3e927bf6a5b8cb628c393eefeb4ad351fe3381a5135b717b"} {"level":"info","ts":"2026-07-10T21:16:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/379052ef4b75a254113da3aae9eefd2364c6fb1f95e28f6134d3d31f8174b730"} {"level":"info","ts":"2026-07-10T21:16:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ff9909f1bba64083306f4b7c5bbc7c2086c2423b87206dc9f8d12f7adbb4cc04"} {"level":"info","ts":"2026-07-10T21:16:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6a2a0eab8bd82a59d492bed5e26b2365aa207bd9d9672a8e85c2119764653f1c"} {"level":"info","ts":"2026-07-10T21:16:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3255dd9d669c5016b79953dcb3972854fbd8e2dab48449ec49ca84500f1dda91"} {"level":"info","ts":"2026-07-10T21:16:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f798f88f67eb647e1bce4853cf933173bebcd49ebf41a09ca19a382de8e6bc47"} {"level":"info","ts":"2026-07-10T21:16:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f96b2f83dc390dbb468835ea0c8e0d2432deda80a89b7c2c6a9f7975c5a65721"} {"level":"info","ts":"2026-07-10T21:16:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c2475a58e71d7d5e4b52825632dbc7cf7afbda3c1aa11d03801239a4dd3e11a8"} {"level":"info","ts":"2026-07-10T21:16:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ad4438427a5982ac7d60d6e6703d631648dc3fd868926b6b3638a5b40fad8d4a"} {"level":"info","ts":"2026-07-10T21:16:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0f3af840b5faefe1d4291280a872e98b84eeb5eeefd837e5d91eddccc438208e"} {"level":"info","ts":"2026-07-10T21:16:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/861cdd2bc7ebe1f696a48bac573347e539d5a77f911e449cb91c85494b9e6c54"} {"level":"info","ts":"2026-07-10T21:16:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/61f61e6aff905dc0ce7b80643d6412dfbd5141c8c23a8b21248207e929dcda7a"} {"level":"info","ts":"2026-07-10T21:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/583bbf965dd1890a47af3754f06c74835550be9ac0ab71f33dd4d1fbc0b3c00d"} {"level":"debug","ts":"2026-07-10T21:16:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b10df5e87dbaa368a3b1cdde31b4afe063d54888573682d298fbedfc8535bb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:16:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:16:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b10df5e87dbaa368a3b1cdde31b4afe063d54888573682d298fbedfc8535bb6"} {"level":"info","ts":"2026-07-10T21:16:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b10df5e87dbaa368a3b1cdde31b4afe063d54888573682d298fbedfc8535bb6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b10df5e87dbaa368a3b1cdde31b4afe063d54888573682d298fbedfc8535bb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:16:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:16:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b10df5e87dbaa368a3b1cdde31b4afe063d54888573682d298fbedfc8535bb6"} {"level":"info","ts":"2026-07-10T21:16:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b10df5e87dbaa368a3b1cdde31b4afe063d54888573682d298fbedfc8535bb6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b10df5e87dbaa368a3b1cdde31b4afe063d54888573682d298fbedfc8535bb6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b10df5e87dbaa368a3b1cdde31b4afe063d54888573682d298fbedfc8535bb6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:16:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b10df5e87dbaa368a3b1cdde31b4afe063d54888573682d298fbedfc8535bb6"} {"level":"debug","ts":"2026-07-10T21:16:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b10df5e87dbaa368a3b1cdde31b4afe063d54888573682d298fbedfc8535bb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:16:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:16:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b10df5e87dbaa368a3b1cdde31b4afe063d54888573682d298fbedfc8535bb6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b10df5e87dbaa368a3b1cdde31b4afe063d54888573682d298fbedfc8535bb6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b10df5e87dbaa368a3b1cdde31b4afe063d54888573682d298fbedfc8535bb6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:16:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b10df5e87dbaa368a3b1cdde31b4afe063d54888573682d298fbedfc8535bb6"} {"level":"debug","ts":"2026-07-10T21:16:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32d1866ec7ab6134b3f6ebe10f01afa8722ac3e44cfb7180420385c5978f28f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:16:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:16:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32d1866ec7ab6134b3f6ebe10f01afa8722ac3e44cfb7180420385c5978f28f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32d1866ec7ab6134b3f6ebe10f01afa8722ac3e44cfb7180420385c5978f28f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:16:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:16:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32d1866ec7ab6134b3f6ebe10f01afa8722ac3e44cfb7180420385c5978f28f5"} {"level":"info","ts":"2026-07-10T21:16:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32d1866ec7ab6134b3f6ebe10f01afa8722ac3e44cfb7180420385c5978f28f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32d1866ec7ab6134b3f6ebe10f01afa8722ac3e44cfb7180420385c5978f28f5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:16:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32d1866ec7ab6134b3f6ebe10f01afa8722ac3e44cfb7180420385c5978f28f5"} {"level":"debug","ts":"2026-07-10T21:16:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32d1866ec7ab6134b3f6ebe10f01afa8722ac3e44cfb7180420385c5978f28f5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:16:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32d1866ec7ab6134b3f6ebe10f01afa8722ac3e44cfb7180420385c5978f28f5"} {"level":"debug","ts":"2026-07-10T21:16:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32d1866ec7ab6134b3f6ebe10f01afa8722ac3e44cfb7180420385c5978f28f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:16:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:16:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32d1866ec7ab6134b3f6ebe10f01afa8722ac3e44cfb7180420385c5978f28f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32d1866ec7ab6134b3f6ebe10f01afa8722ac3e44cfb7180420385c5978f28f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32d1866ec7ab6134b3f6ebe10f01afa8722ac3e44cfb7180420385c5978f28f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:16:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:16:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32d1866ec7ab6134b3f6ebe10f01afa8722ac3e44cfb7180420385c5978f28f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32d1866ec7ab6134b3f6ebe10f01afa8722ac3e44cfb7180420385c5978f28f5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:16:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32d1866ec7ab6134b3f6ebe10f01afa8722ac3e44cfb7180420385c5978f28f5"} {"level":"debug","ts":"2026-07-10T21:16:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32d1866ec7ab6134b3f6ebe10f01afa8722ac3e44cfb7180420385c5978f28f5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:16:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32d1866ec7ab6134b3f6ebe10f01afa8722ac3e44cfb7180420385c5978f28f5"} {"level":"debug","ts":"2026-07-10T21:16:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32d1866ec7ab6134b3f6ebe10f01afa8722ac3e44cfb7180420385c5978f28f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:16:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:16:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32d1866ec7ab6134b3f6ebe10f01afa8722ac3e44cfb7180420385c5978f28f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32d1866ec7ab6134b3f6ebe10f01afa8722ac3e44cfb7180420385c5978f28f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32d1866ec7ab6134b3f6ebe10f01afa8722ac3e44cfb7180420385c5978f28f5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:16:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32d1866ec7ab6134b3f6ebe10f01afa8722ac3e44cfb7180420385c5978f28f5"} {"level":"debug","ts":"2026-07-10T21:16:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29f5aed263a4ef4d9f53113b64521af41a8d4f9c93124ba9429fd756daf619ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:16:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:16:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29f5aed263a4ef4d9f53113b64521af41a8d4f9c93124ba9429fd756daf619ed"} {"level":"info","ts":"2026-07-10T21:16:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29f5aed263a4ef4d9f53113b64521af41a8d4f9c93124ba9429fd756daf619ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29f5aed263a4ef4d9f53113b64521af41a8d4f9c93124ba9429fd756daf619ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29f5aed263a4ef4d9f53113b64521af41a8d4f9c93124ba9429fd756daf619ed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:16:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29f5aed263a4ef4d9f53113b64521af41a8d4f9c93124ba9429fd756daf619ed"} {"level":"debug","ts":"2026-07-10T21:16:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29f5aed263a4ef4d9f53113b64521af41a8d4f9c93124ba9429fd756daf619ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:16:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:16:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29f5aed263a4ef4d9f53113b64521af41a8d4f9c93124ba9429fd756daf619ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29f5aed263a4ef4d9f53113b64521af41a8d4f9c93124ba9429fd756daf619ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29f5aed263a4ef4d9f53113b64521af41a8d4f9c93124ba9429fd756daf619ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:16:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:16:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29f5aed263a4ef4d9f53113b64521af41a8d4f9c93124ba9429fd756daf619ed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:16:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29f5aed263a4ef4d9f53113b64521af41a8d4f9c93124ba9429fd756daf619ed"} {"level":"debug","ts":"2026-07-10T21:16:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29f5aed263a4ef4d9f53113b64521af41a8d4f9c93124ba9429fd756daf619ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29f5aed263a4ef4d9f53113b64521af41a8d4f9c93124ba9429fd756daf619ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb9f880206d6aa2405a6086f2e16bc7f3b0242708ee4ed6759135e1678ab4d85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:16:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:16:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29f5aed263a4ef4d9f53113b64521af41a8d4f9c93124ba9429fd756daf619ed"} {"level":"info","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb9f880206d6aa2405a6086f2e16bc7f3b0242708ee4ed6759135e1678ab4d85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29f5aed263a4ef4d9f53113b64521af41a8d4f9c93124ba9429fd756daf619ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:16:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:16:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29f5aed263a4ef4d9f53113b64521af41a8d4f9c93124ba9429fd756daf619ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb9f880206d6aa2405a6086f2e16bc7f3b0242708ee4ed6759135e1678ab4d85"} {"level":"info","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29f5aed263a4ef4d9f53113b64521af41a8d4f9c93124ba9429fd756daf619ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb9f880206d6aa2405a6086f2e16bc7f3b0242708ee4ed6759135e1678ab4d85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:16:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:16:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb9f880206d6aa2405a6086f2e16bc7f3b0242708ee4ed6759135e1678ab4d85"} {"level":"info","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb9f880206d6aa2405a6086f2e16bc7f3b0242708ee4ed6759135e1678ab4d85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29f5aed263a4ef4d9f53113b64521af41a8d4f9c93124ba9429fd756daf619ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:16:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:16:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29f5aed263a4ef4d9f53113b64521af41a8d4f9c93124ba9429fd756daf619ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb9f880206d6aa2405a6086f2e16bc7f3b0242708ee4ed6759135e1678ab4d85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:16:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:16:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb9f880206d6aa2405a6086f2e16bc7f3b0242708ee4ed6759135e1678ab4d85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb9f880206d6aa2405a6086f2e16bc7f3b0242708ee4ed6759135e1678ab4d85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29f5aed263a4ef4d9f53113b64521af41a8d4f9c93124ba9429fd756daf619ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dc8f660e81b8547b395b7de6fb4282fb1beff3e9e4cf7aae28cbd8a7131401f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:16:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:16:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29f5aed263a4ef4d9f53113b64521af41a8d4f9c93124ba9429fd756daf619ed"} {"level":"info","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dc8f660e81b8547b395b7de6fb4282fb1beff3e9e4cf7aae28cbd8a7131401f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb9f880206d6aa2405a6086f2e16bc7f3b0242708ee4ed6759135e1678ab4d85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:16:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:16:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb9f880206d6aa2405a6086f2e16bc7f3b0242708ee4ed6759135e1678ab4d85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29f5aed263a4ef4d9f53113b64521af41a8d4f9c93124ba9429fd756daf619ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:16:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:16:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29f5aed263a4ef4d9f53113b64521af41a8d4f9c93124ba9429fd756daf619ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb9f880206d6aa2405a6086f2e16bc7f3b0242708ee4ed6759135e1678ab4d85"} {"level":"info","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29f5aed263a4ef4d9f53113b64521af41a8d4f9c93124ba9429fd756daf619ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dc8f660e81b8547b395b7de6fb4282fb1beff3e9e4cf7aae28cbd8a7131401f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:16:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:16:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dc8f660e81b8547b395b7de6fb4282fb1beff3e9e4cf7aae28cbd8a7131401f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb9f880206d6aa2405a6086f2e16bc7f3b0242708ee4ed6759135e1678ab4d85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:16:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:16:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb9f880206d6aa2405a6086f2e16bc7f3b0242708ee4ed6759135e1678ab4d85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dc8f660e81b8547b395b7de6fb4282fb1beff3e9e4cf7aae28cbd8a7131401f"} {"level":"info","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb9f880206d6aa2405a6086f2e16bc7f3b0242708ee4ed6759135e1678ab4d85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29f5aed263a4ef4d9f53113b64521af41a8d4f9c93124ba9429fd756daf619ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:16:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:16:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29f5aed263a4ef4d9f53113b64521af41a8d4f9c93124ba9429fd756daf619ed"} {"level":"info","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29f5aed263a4ef4d9f53113b64521af41a8d4f9c93124ba9429fd756daf619ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dc8f660e81b8547b395b7de6fb4282fb1beff3e9e4cf7aae28cbd8a7131401f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:16:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:16:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4dc8f660e81b8547b395b7de6fb4282fb1beff3e9e4cf7aae28cbd8a7131401f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb9f880206d6aa2405a6086f2e16bc7f3b0242708ee4ed6759135e1678ab4d85"} {"level":"info","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dc8f660e81b8547b395b7de6fb4282fb1beff3e9e4cf7aae28cbd8a7131401f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb9f880206d6aa2405a6086f2e16bc7f3b0242708ee4ed6759135e1678ab4d85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29f5aed263a4ef4d9f53113b64521af41a8d4f9c93124ba9429fd756daf619ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:16:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:16:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29f5aed263a4ef4d9f53113b64521af41a8d4f9c93124ba9429fd756daf619ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29f5aed263a4ef4d9f53113b64521af41a8d4f9c93124ba9429fd756daf619ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dc8f660e81b8547b395b7de6fb4282fb1beff3e9e4cf7aae28cbd8a7131401f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:16:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:16:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dc8f660e81b8547b395b7de6fb4282fb1beff3e9e4cf7aae28cbd8a7131401f"} {"level":"info","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dc8f660e81b8547b395b7de6fb4282fb1beff3e9e4cf7aae28cbd8a7131401f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29f5aed263a4ef4d9f53113b64521af41a8d4f9c93124ba9429fd756daf619ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:16:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:16:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29f5aed263a4ef4d9f53113b64521af41a8d4f9c93124ba9429fd756daf619ed"} {"level":"info","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29f5aed263a4ef4d9f53113b64521af41a8d4f9c93124ba9429fd756daf619ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dc8f660e81b8547b395b7de6fb4282fb1beff3e9e4cf7aae28cbd8a7131401f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29f5aed263a4ef4d9f53113b64521af41a8d4f9c93124ba9429fd756daf619ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:16:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:16:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29f5aed263a4ef4d9f53113b64521af41a8d4f9c93124ba9429fd756daf619ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dc8f660e81b8547b395b7de6fb4282fb1beff3e9e4cf7aae28cbd8a7131401f"} {"level":"info","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29f5aed263a4ef4d9f53113b64521af41a8d4f9c93124ba9429fd756daf619ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6ef379c6f4cb3f37dda6cc098c00dd726bb67cb446f14839589af346d07e01e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:16:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:16:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29f5aed263a4ef4d9f53113b64521af41a8d4f9c93124ba9429fd756daf619ed"} {"level":"info","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6ef379c6f4cb3f37dda6cc098c00dd726bb67cb446f14839589af346d07e01e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dc8f660e81b8547b395b7de6fb4282fb1beff3e9e4cf7aae28cbd8a7131401f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:16:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:16:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4dc8f660e81b8547b395b7de6fb4282fb1beff3e9e4cf7aae28cbd8a7131401f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dc8f660e81b8547b395b7de6fb4282fb1beff3e9e4cf7aae28cbd8a7131401f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29f5aed263a4ef4d9f53113b64521af41a8d4f9c93124ba9429fd756daf619ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6ef379c6f4cb3f37dda6cc098c00dd726bb67cb446f14839589af346d07e01e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:16:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:16:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6ef379c6f4cb3f37dda6cc098c00dd726bb67cb446f14839589af346d07e01e"} {"level":"info","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6ef379c6f4cb3f37dda6cc098c00dd726bb67cb446f14839589af346d07e01e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dc8f660e81b8547b395b7de6fb4282fb1beff3e9e4cf7aae28cbd8a7131401f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6ef379c6f4cb3f37dda6cc098c00dd726bb67cb446f14839589af346d07e01e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:16:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:16:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d6ef379c6f4cb3f37dda6cc098c00dd726bb67cb446f14839589af346d07e01e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29f5aed263a4ef4d9f53113b64521af41a8d4f9c93124ba9429fd756daf619ed"} {"level":"info","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6ef379c6f4cb3f37dda6cc098c00dd726bb67cb446f14839589af346d07e01e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6ef379c6f4cb3f37dda6cc098c00dd726bb67cb446f14839589af346d07e01e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:16:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:16:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d6ef379c6f4cb3f37dda6cc098c00dd726bb67cb446f14839589af346d07e01e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d6ef379c6f4cb3f37dda6cc098c00dd726bb67cb446f14839589af346d07e01e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d6ef379c6f4cb3f37dda6cc098c00dd726bb67cb446f14839589af346d07e01e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6ef379c6f4cb3f37dda6cc098c00dd726bb67cb446f14839589af346d07e01e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6ef379c6f4cb3f37dda6cc098c00dd726bb67cb446f14839589af346d07e01e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dc8f660e81b8547b395b7de6fb4282fb1beff3e9e4cf7aae28cbd8a7131401f"} {"level":"info","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6ef379c6f4cb3f37dda6cc098c00dd726bb67cb446f14839589af346d07e01e"} {"level":"debug","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24d90e916b685427402ad3edd87775b14fdea02d55ed45f11082e591dc831919","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:16:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:16:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24d90e916b685427402ad3edd87775b14fdea02d55ed45f11082e591dc831919","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24d90e916b685427402ad3edd87775b14fdea02d55ed45f11082e591dc831919","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24d90e916b685427402ad3edd87775b14fdea02d55ed45f11082e591dc831919","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24d90e916b685427402ad3edd87775b14fdea02d55ed45f11082e591dc831919"} {"level":"debug","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24d90e916b685427402ad3edd87775b14fdea02d55ed45f11082e591dc831919","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24d90e916b685427402ad3edd87775b14fdea02d55ed45f11082e591dc831919"} {"level":"debug","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24d90e916b685427402ad3edd87775b14fdea02d55ed45f11082e591dc831919","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:16:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:16:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24d90e916b685427402ad3edd87775b14fdea02d55ed45f11082e591dc831919"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24d90e916b685427402ad3edd87775b14fdea02d55ed45f11082e591dc831919","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24d90e916b685427402ad3edd87775b14fdea02d55ed45f11082e591dc831919","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24d90e916b685427402ad3edd87775b14fdea02d55ed45f11082e591dc831919"} {"level":"debug","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e05e1ce5e38677582ca67faea8cd560ed74c62ec5d9600d6fc35e812ab3a26a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:16:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:16:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e05e1ce5e38677582ca67faea8cd560ed74c62ec5d9600d6fc35e812ab3a26a"} {"level":"info","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e05e1ce5e38677582ca67faea8cd560ed74c62ec5d9600d6fc35e812ab3a26a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e05e1ce5e38677582ca67faea8cd560ed74c62ec5d9600d6fc35e812ab3a26a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e05e1ce5e38677582ca67faea8cd560ed74c62ec5d9600d6fc35e812ab3a26a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e05e1ce5e38677582ca67faea8cd560ed74c62ec5d9600d6fc35e812ab3a26a"} {"level":"debug","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e05e1ce5e38677582ca67faea8cd560ed74c62ec5d9600d6fc35e812ab3a26a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:16:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:16:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e05e1ce5e38677582ca67faea8cd560ed74c62ec5d9600d6fc35e812ab3a26a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e05e1ce5e38677582ca67faea8cd560ed74c62ec5d9600d6fc35e812ab3a26a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e05e1ce5e38677582ca67faea8cd560ed74c62ec5d9600d6fc35e812ab3a26a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:16:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:16:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e05e1ce5e38677582ca67faea8cd560ed74c62ec5d9600d6fc35e812ab3a26a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e05e1ce5e38677582ca67faea8cd560ed74c62ec5d9600d6fc35e812ab3a26a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e05e1ce5e38677582ca67faea8cd560ed74c62ec5d9600d6fc35e812ab3a26a"} {"level":"debug","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e05e1ce5e38677582ca67faea8cd560ed74c62ec5d9600d6fc35e812ab3a26a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e05e1ce5e38677582ca67faea8cd560ed74c62ec5d9600d6fc35e812ab3a26a"} {"level":"debug","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e05e1ce5e38677582ca67faea8cd560ed74c62ec5d9600d6fc35e812ab3a26a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:16:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:16:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e05e1ce5e38677582ca67faea8cd560ed74c62ec5d9600d6fc35e812ab3a26a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e05e1ce5e38677582ca67faea8cd560ed74c62ec5d9600d6fc35e812ab3a26a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e05e1ce5e38677582ca67faea8cd560ed74c62ec5d9600d6fc35e812ab3a26a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:16:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e05e1ce5e38677582ca67faea8cd560ed74c62ec5d9600d6fc35e812ab3a26a"} {"level":"debug","ts":"2026-07-10T21:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bf8e085de66c16d9c4bf27a0e08d87f96285f1af8f993c7ec7a188478de5b34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:16:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:16:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bf8e085de66c16d9c4bf27a0e08d87f96285f1af8f993c7ec7a188478de5b34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bf8e085de66c16d9c4bf27a0e08d87f96285f1af8f993c7ec7a188478de5b34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:16:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:16:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bf8e085de66c16d9c4bf27a0e08d87f96285f1af8f993c7ec7a188478de5b34"} {"level":"info","ts":"2026-07-10T21:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bf8e085de66c16d9c4bf27a0e08d87f96285f1af8f993c7ec7a188478de5b34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bf8e085de66c16d9c4bf27a0e08d87f96285f1af8f993c7ec7a188478de5b34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:16:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:16:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-10T21:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8bf8e085de66c16d9c4bf27a0e08d87f96285f1af8f993c7ec7a188478de5b34","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8bf8e085de66c16d9c4bf27a0e08d87f96285f1af8f993c7ec7a188478de5b34\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T21:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bf8e085de66c16d9c4bf27a0e08d87f96285f1af8f993c7ec7a188478de5b34","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bf8e085de66c16d9c4bf27a0e08d87f96285f1af8f993c7ec7a188478de5b34"} {"level":"debug","ts":"2026-07-10T21:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bf8e085de66c16d9c4bf27a0e08d87f96285f1af8f993c7ec7a188478de5b34","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bf8e085de66c16d9c4bf27a0e08d87f96285f1af8f993c7ec7a188478de5b34"} {"level":"debug","ts":"2026-07-10T21:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bf8e085de66c16d9c4bf27a0e08d87f96285f1af8f993c7ec7a188478de5b34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:16:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:16:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8bf8e085de66c16d9c4bf27a0e08d87f96285f1af8f993c7ec7a188478de5b34"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bf8e085de66c16d9c4bf27a0e08d87f96285f1af8f993c7ec7a188478de5b34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bf8e085de66c16d9c4bf27a0e08d87f96285f1af8f993c7ec7a188478de5b34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:16:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:16:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bf8e085de66c16d9c4bf27a0e08d87f96285f1af8f993c7ec7a188478de5b34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bf8e085de66c16d9c4bf27a0e08d87f96285f1af8f993c7ec7a188478de5b34","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bf8e085de66c16d9c4bf27a0e08d87f96285f1af8f993c7ec7a188478de5b34"} {"level":"debug","ts":"2026-07-10T21:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bf8e085de66c16d9c4bf27a0e08d87f96285f1af8f993c7ec7a188478de5b34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bf8e085de66c16d9c4bf27a0e08d87f96285f1af8f993c7ec7a188478de5b34","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bf8e085de66c16d9c4bf27a0e08d87f96285f1af8f993c7ec7a188478de5b34"} {"level":"debug","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bf8e085de66c16d9c4bf27a0e08d87f96285f1af8f993c7ec7a188478de5b34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8bf8e085de66c16d9c4bf27a0e08d87f96285f1af8f993c7ec7a188478de5b34"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bf8e085de66c16d9c4bf27a0e08d87f96285f1af8f993c7ec7a188478de5b34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bf8e085de66c16d9c4bf27a0e08d87f96285f1af8f993c7ec7a188478de5b34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bf8e085de66c16d9c4bf27a0e08d87f96285f1af8f993c7ec7a188478de5b34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bf8e085de66c16d9c4bf27a0e08d87f96285f1af8f993c7ec7a188478de5b34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bf8e085de66c16d9c4bf27a0e08d87f96285f1af8f993c7ec7a188478de5b34","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bf8e085de66c16d9c4bf27a0e08d87f96285f1af8f993c7ec7a188478de5b34"} {"level":"debug","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bf8e085de66c16d9c4bf27a0e08d87f96285f1af8f993c7ec7a188478de5b34","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bf8e085de66c16d9c4bf27a0e08d87f96285f1af8f993c7ec7a188478de5b34"} {"level":"debug","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bf8e085de66c16d9c4bf27a0e08d87f96285f1af8f993c7ec7a188478de5b34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8bf8e085de66c16d9c4bf27a0e08d87f96285f1af8f993c7ec7a188478de5b34"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bf8e085de66c16d9c4bf27a0e08d87f96285f1af8f993c7ec7a188478de5b34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bf8e085de66c16d9c4bf27a0e08d87f96285f1af8f993c7ec7a188478de5b34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bf8e085de66c16d9c4bf27a0e08d87f96285f1af8f993c7ec7a188478de5b34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bf8e085de66c16d9c4bf27a0e08d87f96285f1af8f993c7ec7a188478de5b34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bf8e085de66c16d9c4bf27a0e08d87f96285f1af8f993c7ec7a188478de5b34","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bf8e085de66c16d9c4bf27a0e08d87f96285f1af8f993c7ec7a188478de5b34"} {"level":"debug","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bf8e085de66c16d9c4bf27a0e08d87f96285f1af8f993c7ec7a188478de5b34","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bf8e085de66c16d9c4bf27a0e08d87f96285f1af8f993c7ec7a188478de5b34"} {"level":"debug","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a54c6a7590e6a75673678f6cffffca201357bc47e594a88154f74fded68b130","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a54c6a7590e6a75673678f6cffffca201357bc47e594a88154f74fded68b130","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a54c6a7590e6a75673678f6cffffca201357bc47e594a88154f74fded68b130","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a54c6a7590e6a75673678f6cffffca201357bc47e594a88154f74fded68b130"} {"level":"debug","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a54c6a7590e6a75673678f6cffffca201357bc47e594a88154f74fded68b130","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bf8e085de66c16d9c4bf27a0e08d87f96285f1af8f993c7ec7a188478de5b34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8bf8e085de66c16d9c4bf27a0e08d87f96285f1af8f993c7ec7a188478de5b34"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a54c6a7590e6a75673678f6cffffca201357bc47e594a88154f74fded68b130"} {"level":"info","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bf8e085de66c16d9c4bf27a0e08d87f96285f1af8f993c7ec7a188478de5b34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a54c6a7590e6a75673678f6cffffca201357bc47e594a88154f74fded68b130","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a54c6a7590e6a75673678f6cffffca201357bc47e594a88154f74fded68b130"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a54c6a7590e6a75673678f6cffffca201357bc47e594a88154f74fded68b130","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bf8e085de66c16d9c4bf27a0e08d87f96285f1af8f993c7ec7a188478de5b34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bf8e085de66c16d9c4bf27a0e08d87f96285f1af8f993c7ec7a188478de5b34"} {"level":"info","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bf8e085de66c16d9c4bf27a0e08d87f96285f1af8f993c7ec7a188478de5b34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a54c6a7590e6a75673678f6cffffca201357bc47e594a88154f74fded68b130","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a54c6a7590e6a75673678f6cffffca201357bc47e594a88154f74fded68b130","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bf8e085de66c16d9c4bf27a0e08d87f96285f1af8f993c7ec7a188478de5b34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8bf8e085de66c16d9c4bf27a0e08d87f96285f1af8f993c7ec7a188478de5b34"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a54c6a7590e6a75673678f6cffffca201357bc47e594a88154f74fded68b130"} {"level":"info","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bf8e085de66c16d9c4bf27a0e08d87f96285f1af8f993c7ec7a188478de5b34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a54c6a7590e6a75673678f6cffffca201357bc47e594a88154f74fded68b130","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a54c6a7590e6a75673678f6cffffca201357bc47e594a88154f74fded68b130"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a54c6a7590e6a75673678f6cffffca201357bc47e594a88154f74fded68b130","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bf8e085de66c16d9c4bf27a0e08d87f96285f1af8f993c7ec7a188478de5b34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bf8e085de66c16d9c4bf27a0e08d87f96285f1af8f993c7ec7a188478de5b34"} {"level":"info","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bf8e085de66c16d9c4bf27a0e08d87f96285f1af8f993c7ec7a188478de5b34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a67c345d8bec792aebff611aa6c17862dbbbed84b3afaeb07a742131a570ee4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a54c6a7590e6a75673678f6cffffca201357bc47e594a88154f74fded68b130"} {"level":"info","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a67c345d8bec792aebff611aa6c17862dbbbed84b3afaeb07a742131a570ee4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a54c6a7590e6a75673678f6cffffca201357bc47e594a88154f74fded68b130","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bf8e085de66c16d9c4bf27a0e08d87f96285f1af8f993c7ec7a188478de5b34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8bf8e085de66c16d9c4bf27a0e08d87f96285f1af8f993c7ec7a188478de5b34"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bf8e085de66c16d9c4bf27a0e08d87f96285f1af8f993c7ec7a188478de5b34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a67c345d8bec792aebff611aa6c17862dbbbed84b3afaeb07a742131a570ee4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a67c345d8bec792aebff611aa6c17862dbbbed84b3afaeb07a742131a570ee4c"} {"level":"info","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a67c345d8bec792aebff611aa6c17862dbbbed84b3afaeb07a742131a570ee4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bf8e085de66c16d9c4bf27a0e08d87f96285f1af8f993c7ec7a188478de5b34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bf8e085de66c16d9c4bf27a0e08d87f96285f1af8f993c7ec7a188478de5b34"} {"level":"info","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bf8e085de66c16d9c4bf27a0e08d87f96285f1af8f993c7ec7a188478de5b34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a67c345d8bec792aebff611aa6c17862dbbbed84b3afaeb07a742131a570ee4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a67c345d8bec792aebff611aa6c17862dbbbed84b3afaeb07a742131a570ee4c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a67c345d8bec792aebff611aa6c17862dbbbed84b3afaeb07a742131a570ee4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bf8e085de66c16d9c4bf27a0e08d87f96285f1af8f993c7ec7a188478de5b34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8bf8e085de66c16d9c4bf27a0e08d87f96285f1af8f993c7ec7a188478de5b34"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a54c6a7590e6a75673678f6cffffca201357bc47e594a88154f74fded68b130"} {"level":"info","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bf8e085de66c16d9c4bf27a0e08d87f96285f1af8f993c7ec7a188478de5b34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a67c345d8bec792aebff611aa6c17862dbbbed84b3afaeb07a742131a570ee4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a67c345d8bec792aebff611aa6c17862dbbbed84b3afaeb07a742131a570ee4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bf8e085de66c16d9c4bf27a0e08d87f96285f1af8f993c7ec7a188478de5b34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a67c345d8bec792aebff611aa6c17862dbbbed84b3afaeb07a742131a570ee4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a67c345d8bec792aebff611aa6c17862dbbbed84b3afaeb07a742131a570ee4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a67c345d8bec792aebff611aa6c17862dbbbed84b3afaeb07a742131a570ee4c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a67c345d8bec792aebff611aa6c17862dbbbed84b3afaeb07a742131a570ee4c"} {"level":"debug","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c56b0acd234166a0b9620008f1e1d38eecc074022055886766fa38712068c75c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bf8e085de66c16d9c4bf27a0e08d87f96285f1af8f993c7ec7a188478de5b34"} {"level":"info","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c56b0acd234166a0b9620008f1e1d38eecc074022055886766fa38712068c75c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c56b0acd234166a0b9620008f1e1d38eecc074022055886766fa38712068c75c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c56b0acd234166a0b9620008f1e1d38eecc074022055886766fa38712068c75c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a67c345d8bec792aebff611aa6c17862dbbbed84b3afaeb07a742131a570ee4c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a67c345d8bec792aebff611aa6c17862dbbbed84b3afaeb07a742131a570ee4c"} {"level":"debug","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c56b0acd234166a0b9620008f1e1d38eecc074022055886766fa38712068c75c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c56b0acd234166a0b9620008f1e1d38eecc074022055886766fa38712068c75c"} {"level":"info","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c56b0acd234166a0b9620008f1e1d38eecc074022055886766fa38712068c75c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c56b0acd234166a0b9620008f1e1d38eecc074022055886766fa38712068c75c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c56b0acd234166a0b9620008f1e1d38eecc074022055886766fa38712068c75c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c56b0acd234166a0b9620008f1e1d38eecc074022055886766fa38712068c75c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c56b0acd234166a0b9620008f1e1d38eecc074022055886766fa38712068c75c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c56b0acd234166a0b9620008f1e1d38eecc074022055886766fa38712068c75c"} {"level":"info","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c56b0acd234166a0b9620008f1e1d38eecc074022055886766fa38712068c75c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c56b0acd234166a0b9620008f1e1d38eecc074022055886766fa38712068c75c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c56b0acd234166a0b9620008f1e1d38eecc074022055886766fa38712068c75c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a67c345d8bec792aebff611aa6c17862dbbbed84b3afaeb07a742131a570ee4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a67c345d8bec792aebff611aa6c17862dbbbed84b3afaeb07a742131a570ee4c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c56b0acd234166a0b9620008f1e1d38eecc074022055886766fa38712068c75c"} {"level":"info","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a67c345d8bec792aebff611aa6c17862dbbbed84b3afaeb07a742131a570ee4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c56b0acd234166a0b9620008f1e1d38eecc074022055886766fa38712068c75c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a67c345d8bec792aebff611aa6c17862dbbbed84b3afaeb07a742131a570ee4c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c56b0acd234166a0b9620008f1e1d38eecc074022055886766fa38712068c75c"} {"level":"info","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a67c345d8bec792aebff611aa6c17862dbbbed84b3afaeb07a742131a570ee4c"} {"level":"debug","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c56b0acd234166a0b9620008f1e1d38eecc074022055886766fa38712068c75c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c56b0acd234166a0b9620008f1e1d38eecc074022055886766fa38712068c75c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c56b0acd234166a0b9620008f1e1d38eecc074022055886766fa38712068c75c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c56b0acd234166a0b9620008f1e1d38eecc074022055886766fa38712068c75c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c56b0acd234166a0b9620008f1e1d38eecc074022055886766fa38712068c75c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c56b0acd234166a0b9620008f1e1d38eecc074022055886766fa38712068c75c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c56b0acd234166a0b9620008f1e1d38eecc074022055886766fa38712068c75c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87b8e0b25c11e858831bb6e6b18c5f40750c21c5a27fbdb0d321ca43b434ff58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c56b0acd234166a0b9620008f1e1d38eecc074022055886766fa38712068c75c"} {"level":"info","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87b8e0b25c11e858831bb6e6b18c5f40750c21c5a27fbdb0d321ca43b434ff58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87b8e0b25c11e858831bb6e6b18c5f40750c21c5a27fbdb0d321ca43b434ff58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87b8e0b25c11e858831bb6e6b18c5f40750c21c5a27fbdb0d321ca43b434ff58"} {"level":"info","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87b8e0b25c11e858831bb6e6b18c5f40750c21c5a27fbdb0d321ca43b434ff58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c56b0acd234166a0b9620008f1e1d38eecc074022055886766fa38712068c75c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87b8e0b25c11e858831bb6e6b18c5f40750c21c5a27fbdb0d321ca43b434ff58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["87b8e0b25c11e858831bb6e6b18c5f40750c21c5a27fbdb0d321ca43b434ff58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"87b8e0b25c11e858831bb6e6b18c5f40750c21c5a27fbdb0d321ca43b434ff58","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"87b8e0b25c11e858831bb6e6b18c5f40750c21c5a27fbdb0d321ca43b434ff58\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87b8e0b25c11e858831bb6e6b18c5f40750c21c5a27fbdb0d321ca43b434ff58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["87b8e0b25c11e858831bb6e6b18c5f40750c21c5a27fbdb0d321ca43b434ff58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c56b0acd234166a0b9620008f1e1d38eecc074022055886766fa38712068c75c"} {"level":"info","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87b8e0b25c11e858831bb6e6b18c5f40750c21c5a27fbdb0d321ca43b434ff58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87b8e0b25c11e858831bb6e6b18c5f40750c21c5a27fbdb0d321ca43b434ff58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87b8e0b25c11e858831bb6e6b18c5f40750c21c5a27fbdb0d321ca43b434ff58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87b8e0b25c11e858831bb6e6b18c5f40750c21c5a27fbdb0d321ca43b434ff58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87b8e0b25c11e858831bb6e6b18c5f40750c21c5a27fbdb0d321ca43b434ff58"} {"level":"error","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"87b8e0b25c11e858831bb6e6b18c5f40750c21c5a27fbdb0d321ca43b434ff58","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"87b8e0b25c11e858831bb6e6b18c5f40750c21c5a27fbdb0d321ca43b434ff58\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c56b0acd234166a0b9620008f1e1d38eecc074022055886766fa38712068c75c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c56b0acd234166a0b9620008f1e1d38eecc074022055886766fa38712068c75c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c56b0acd234166a0b9620008f1e1d38eecc074022055886766fa38712068c75c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87b8e0b25c11e858831bb6e6b18c5f40750c21c5a27fbdb0d321ca43b434ff58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c56b0acd234166a0b9620008f1e1d38eecc074022055886766fa38712068c75c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87b8e0b25c11e858831bb6e6b18c5f40750c21c5a27fbdb0d321ca43b434ff58"} {"level":"debug","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7ca7208cbd4819f6bc2276a9010117a0b28d77e0ee1c591f73d7baa99653925","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c56b0acd234166a0b9620008f1e1d38eecc074022055886766fa38712068c75c"} {"level":"info","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7ca7208cbd4819f6bc2276a9010117a0b28d77e0ee1c591f73d7baa99653925","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87b8e0b25c11e858831bb6e6b18c5f40750c21c5a27fbdb0d321ca43b434ff58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["87b8e0b25c11e858831bb6e6b18c5f40750c21c5a27fbdb0d321ca43b434ff58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87b8e0b25c11e858831bb6e6b18c5f40750c21c5a27fbdb0d321ca43b434ff58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7ca7208cbd4819f6bc2276a9010117a0b28d77e0ee1c591f73d7baa99653925","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7ca7208cbd4819f6bc2276a9010117a0b28d77e0ee1c591f73d7baa99653925"} {"level":"info","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7ca7208cbd4819f6bc2276a9010117a0b28d77e0ee1c591f73d7baa99653925","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87b8e0b25c11e858831bb6e6b18c5f40750c21c5a27fbdb0d321ca43b434ff58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87b8e0b25c11e858831bb6e6b18c5f40750c21c5a27fbdb0d321ca43b434ff58"} {"level":"info","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87b8e0b25c11e858831bb6e6b18c5f40750c21c5a27fbdb0d321ca43b434ff58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7ca7208cbd4819f6bc2276a9010117a0b28d77e0ee1c591f73d7baa99653925","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87b8e0b25c11e858831bb6e6b18c5f40750c21c5a27fbdb0d321ca43b434ff58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["87b8e0b25c11e858831bb6e6b18c5f40750c21c5a27fbdb0d321ca43b434ff58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87b8e0b25c11e858831bb6e6b18c5f40750c21c5a27fbdb0d321ca43b434ff58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87b8e0b25c11e858831bb6e6b18c5f40750c21c5a27fbdb0d321ca43b434ff58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["87b8e0b25c11e858831bb6e6b18c5f40750c21c5a27fbdb0d321ca43b434ff58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7ca7208cbd4819f6bc2276a9010117a0b28d77e0ee1c591f73d7baa99653925"} {"level":"error","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"87b8e0b25c11e858831bb6e6b18c5f40750c21c5a27fbdb0d321ca43b434ff58","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"87b8e0b25c11e858831bb6e6b18c5f40750c21c5a27fbdb0d321ca43b434ff58\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7ca7208cbd4819f6bc2276a9010117a0b28d77e0ee1c591f73d7baa99653925","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7ca7208cbd4819f6bc2276a9010117a0b28d77e0ee1c591f73d7baa99653925"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87b8e0b25c11e858831bb6e6b18c5f40750c21c5a27fbdb0d321ca43b434ff58"} {"level":"info","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7ca7208cbd4819f6bc2276a9010117a0b28d77e0ee1c591f73d7baa99653925","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87b8e0b25c11e858831bb6e6b18c5f40750c21c5a27fbdb0d321ca43b434ff58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87b8e0b25c11e858831bb6e6b18c5f40750c21c5a27fbdb0d321ca43b434ff58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7ca7208cbd4819f6bc2276a9010117a0b28d77e0ee1c591f73d7baa99653925","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7705e4aa8b476fb77ba28a144b7ae46cd01b5c0020e04f4daa2c195056894cf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87b8e0b25c11e858831bb6e6b18c5f40750c21c5a27fbdb0d321ca43b434ff58"} {"level":"info","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7705e4aa8b476fb77ba28a144b7ae46cd01b5c0020e04f4daa2c195056894cf5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87b8e0b25c11e858831bb6e6b18c5f40750c21c5a27fbdb0d321ca43b434ff58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["87b8e0b25c11e858831bb6e6b18c5f40750c21c5a27fbdb0d321ca43b434ff58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7ca7208cbd4819f6bc2276a9010117a0b28d77e0ee1c591f73d7baa99653925"} {"level":"info","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87b8e0b25c11e858831bb6e6b18c5f40750c21c5a27fbdb0d321ca43b434ff58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7705e4aa8b476fb77ba28a144b7ae46cd01b5c0020e04f4daa2c195056894cf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7705e4aa8b476fb77ba28a144b7ae46cd01b5c0020e04f4daa2c195056894cf5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87b8e0b25c11e858831bb6e6b18c5f40750c21c5a27fbdb0d321ca43b434ff58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7705e4aa8b476fb77ba28a144b7ae46cd01b5c0020e04f4daa2c195056894cf5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7705e4aa8b476fb77ba28a144b7ae46cd01b5c0020e04f4daa2c195056894cf5"} {"level":"debug","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7705e4aa8b476fb77ba28a144b7ae46cd01b5c0020e04f4daa2c195056894cf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:16:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7705e4aa8b476fb77ba28a144b7ae46cd01b5c0020e04f4daa2c195056894cf5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7705e4aa8b476fb77ba28a144b7ae46cd01b5c0020e04f4daa2c195056894cf5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7705e4aa8b476fb77ba28a144b7ae46cd01b5c0020e04f4daa2c195056894cf5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87b8e0b25c11e858831bb6e6b18c5f40750c21c5a27fbdb0d321ca43b434ff58"} {"level":"info","ts":"2026-07-10T21:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7705e4aa8b476fb77ba28a144b7ae46cd01b5c0020e04f4daa2c195056894cf5"} {"level":"debug","ts":"2026-07-10T21:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fecd2be4609340c7980be8f73b5298b717ccd2fcbcd8e7bba551c06789e017e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:16:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:16:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fecd2be4609340c7980be8f73b5298b717ccd2fcbcd8e7bba551c06789e017e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fecd2be4609340c7980be8f73b5298b717ccd2fcbcd8e7bba551c06789e017e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fecd2be4609340c7980be8f73b5298b717ccd2fcbcd8e7bba551c06789e017e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fecd2be4609340c7980be8f73b5298b717ccd2fcbcd8e7bba551c06789e017e"} {"level":"debug","ts":"2026-07-10T21:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fecd2be4609340c7980be8f73b5298b717ccd2fcbcd8e7bba551c06789e017e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fecd2be4609340c7980be8f73b5298b717ccd2fcbcd8e7bba551c06789e017e"} {"level":"debug","ts":"2026-07-10T21:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fecd2be4609340c7980be8f73b5298b717ccd2fcbcd8e7bba551c06789e017e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:16:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:16:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4fecd2be4609340c7980be8f73b5298b717ccd2fcbcd8e7bba551c06789e017e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fecd2be4609340c7980be8f73b5298b717ccd2fcbcd8e7bba551c06789e017e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fecd2be4609340c7980be8f73b5298b717ccd2fcbcd8e7bba551c06789e017e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fecd2be4609340c7980be8f73b5298b717ccd2fcbcd8e7bba551c06789e017e"} {"level":"debug","ts":"2026-07-10T21:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32d1866ec7ab6134b3f6ebe10f01afa8722ac3e44cfb7180420385c5978f28f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:17:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:17:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32d1866ec7ab6134b3f6ebe10f01afa8722ac3e44cfb7180420385c5978f28f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32d1866ec7ab6134b3f6ebe10f01afa8722ac3e44cfb7180420385c5978f28f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32d1866ec7ab6134b3f6ebe10f01afa8722ac3e44cfb7180420385c5978f28f5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32d1866ec7ab6134b3f6ebe10f01afa8722ac3e44cfb7180420385c5978f28f5"} {"level":"debug","ts":"2026-07-10T21:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32d1866ec7ab6134b3f6ebe10f01afa8722ac3e44cfb7180420385c5978f28f5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32d1866ec7ab6134b3f6ebe10f01afa8722ac3e44cfb7180420385c5978f28f5"} {"level":"debug","ts":"2026-07-10T21:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32d1866ec7ab6134b3f6ebe10f01afa8722ac3e44cfb7180420385c5978f28f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:17:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:17:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32d1866ec7ab6134b3f6ebe10f01afa8722ac3e44cfb7180420385c5978f28f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32d1866ec7ab6134b3f6ebe10f01afa8722ac3e44cfb7180420385c5978f28f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32d1866ec7ab6134b3f6ebe10f01afa8722ac3e44cfb7180420385c5978f28f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:17:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:17:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32d1866ec7ab6134b3f6ebe10f01afa8722ac3e44cfb7180420385c5978f28f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32d1866ec7ab6134b3f6ebe10f01afa8722ac3e44cfb7180420385c5978f28f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32d1866ec7ab6134b3f6ebe10f01afa8722ac3e44cfb7180420385c5978f28f5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32d1866ec7ab6134b3f6ebe10f01afa8722ac3e44cfb7180420385c5978f28f5"} {"level":"debug","ts":"2026-07-10T21:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32d1866ec7ab6134b3f6ebe10f01afa8722ac3e44cfb7180420385c5978f28f5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32d1866ec7ab6134b3f6ebe10f01afa8722ac3e44cfb7180420385c5978f28f5"} {"level":"debug","ts":"2026-07-10T21:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32d1866ec7ab6134b3f6ebe10f01afa8722ac3e44cfb7180420385c5978f28f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:17:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:17:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32d1866ec7ab6134b3f6ebe10f01afa8722ac3e44cfb7180420385c5978f28f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32d1866ec7ab6134b3f6ebe10f01afa8722ac3e44cfb7180420385c5978f28f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32d1866ec7ab6134b3f6ebe10f01afa8722ac3e44cfb7180420385c5978f28f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:17:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:17:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32d1866ec7ab6134b3f6ebe10f01afa8722ac3e44cfb7180420385c5978f28f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32d1866ec7ab6134b3f6ebe10f01afa8722ac3e44cfb7180420385c5978f28f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32d1866ec7ab6134b3f6ebe10f01afa8722ac3e44cfb7180420385c5978f28f5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32d1866ec7ab6134b3f6ebe10f01afa8722ac3e44cfb7180420385c5978f28f5"} {"level":"debug","ts":"2026-07-10T21:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32d1866ec7ab6134b3f6ebe10f01afa8722ac3e44cfb7180420385c5978f28f5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32d1866ec7ab6134b3f6ebe10f01afa8722ac3e44cfb7180420385c5978f28f5"} {"level":"debug","ts":"2026-07-10T21:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32d1866ec7ab6134b3f6ebe10f01afa8722ac3e44cfb7180420385c5978f28f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:17:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:17:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32d1866ec7ab6134b3f6ebe10f01afa8722ac3e44cfb7180420385c5978f28f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32d1866ec7ab6134b3f6ebe10f01afa8722ac3e44cfb7180420385c5978f28f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32d1866ec7ab6134b3f6ebe10f01afa8722ac3e44cfb7180420385c5978f28f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:17:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:17:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32d1866ec7ab6134b3f6ebe10f01afa8722ac3e44cfb7180420385c5978f28f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32d1866ec7ab6134b3f6ebe10f01afa8722ac3e44cfb7180420385c5978f28f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32d1866ec7ab6134b3f6ebe10f01afa8722ac3e44cfb7180420385c5978f28f5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32d1866ec7ab6134b3f6ebe10f01afa8722ac3e44cfb7180420385c5978f28f5"} {"level":"debug","ts":"2026-07-10T21:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32d1866ec7ab6134b3f6ebe10f01afa8722ac3e44cfb7180420385c5978f28f5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32d1866ec7ab6134b3f6ebe10f01afa8722ac3e44cfb7180420385c5978f28f5"} {"level":"debug","ts":"2026-07-10T21:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32d1866ec7ab6134b3f6ebe10f01afa8722ac3e44cfb7180420385c5978f28f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:17:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:17:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32d1866ec7ab6134b3f6ebe10f01afa8722ac3e44cfb7180420385c5978f28f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32d1866ec7ab6134b3f6ebe10f01afa8722ac3e44cfb7180420385c5978f28f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32d1866ec7ab6134b3f6ebe10f01afa8722ac3e44cfb7180420385c5978f28f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29f5aed263a4ef4d9f53113b64521af41a8d4f9c93124ba9429fd756daf619ed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32d1866ec7ab6134b3f6ebe10f01afa8722ac3e44cfb7180420385c5978f28f5"} {"level":"info","ts":"2026-07-10T21:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29f5aed263a4ef4d9f53113b64521af41a8d4f9c93124ba9429fd756daf619ed"} {"level":"debug","ts":"2026-07-10T21:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57dea3d8fd23cd690dfb4e4e7f2713bd6b43347e494ed9c3a93295c590e4c985","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57dea3d8fd23cd690dfb4e4e7f2713bd6b43347e494ed9c3a93295c590e4c985"} {"level":"debug","ts":"2026-07-10T21:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7705e4aa8b476fb77ba28a144b7ae46cd01b5c0020e04f4daa2c195056894cf5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7705e4aa8b476fb77ba28a144b7ae46cd01b5c0020e04f4daa2c195056894cf5"} {"level":"debug","ts":"2026-07-10T21:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dda979ecbc2fddf9870d357957b42eef8f88cc49ca5bc932403aa3ae97eb0af7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:17:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:17:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dda979ecbc2fddf9870d357957b42eef8f88cc49ca5bc932403aa3ae97eb0af7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dda979ecbc2fddf9870d357957b42eef8f88cc49ca5bc932403aa3ae97eb0af7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dda979ecbc2fddf9870d357957b42eef8f88cc49ca5bc932403aa3ae97eb0af7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dda979ecbc2fddf9870d357957b42eef8f88cc49ca5bc932403aa3ae97eb0af7"} {"level":"debug","ts":"2026-07-10T21:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dda979ecbc2fddf9870d357957b42eef8f88cc49ca5bc932403aa3ae97eb0af7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dda979ecbc2fddf9870d357957b42eef8f88cc49ca5bc932403aa3ae97eb0af7"} {"level":"debug","ts":"2026-07-10T21:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dda979ecbc2fddf9870d357957b42eef8f88cc49ca5bc932403aa3ae97eb0af7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:17:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:17:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dda979ecbc2fddf9870d357957b42eef8f88cc49ca5bc932403aa3ae97eb0af7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dda979ecbc2fddf9870d357957b42eef8f88cc49ca5bc932403aa3ae97eb0af7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dda979ecbc2fddf9870d357957b42eef8f88cc49ca5bc932403aa3ae97eb0af7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:17:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:17:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dda979ecbc2fddf9870d357957b42eef8f88cc49ca5bc932403aa3ae97eb0af7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8eee558a6e1b3624d4065fc7008e112d07d12000aeba9ec4e0bbb69202e0afe6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dda979ecbc2fddf9870d357957b42eef8f88cc49ca5bc932403aa3ae97eb0af7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dda979ecbc2fddf9870d357957b42eef8f88cc49ca5bc932403aa3ae97eb0af7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dda979ecbc2fddf9870d357957b42eef8f88cc49ca5bc932403aa3ae97eb0af7"} {"level":"info","ts":"2026-07-10T21:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8eee558a6e1b3624d4065fc7008e112d07d12000aeba9ec4e0bbb69202e0afe6"} {"level":"debug","ts":"2026-07-10T21:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dda979ecbc2fddf9870d357957b42eef8f88cc49ca5bc932403aa3ae97eb0af7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24d90e916b685427402ad3edd87775b14fdea02d55ed45f11082e591dc831919","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:17:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dda979ecbc2fddf9870d357957b42eef8f88cc49ca5bc932403aa3ae97eb0af7"} {"level":"debug","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dda979ecbc2fddf9870d357957b42eef8f88cc49ca5bc932403aa3ae97eb0af7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:17:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:17:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dda979ecbc2fddf9870d357957b42eef8f88cc49ca5bc932403aa3ae97eb0af7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dda979ecbc2fddf9870d357957b42eef8f88cc49ca5bc932403aa3ae97eb0af7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dda979ecbc2fddf9870d357957b42eef8f88cc49ca5bc932403aa3ae97eb0af7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24d90e916b685427402ad3edd87775b14fdea02d55ed45f11082e591dc831919"} {"level":"info","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dda979ecbc2fddf9870d357957b42eef8f88cc49ca5bc932403aa3ae97eb0af7"} {"level":"debug","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fecd2be4609340c7980be8f73b5298b717ccd2fcbcd8e7bba551c06789e017e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:17:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:17:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fecd2be4609340c7980be8f73b5298b717ccd2fcbcd8e7bba551c06789e017e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fecd2be4609340c7980be8f73b5298b717ccd2fcbcd8e7bba551c06789e017e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fecd2be4609340c7980be8f73b5298b717ccd2fcbcd8e7bba551c06789e017e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fecd2be4609340c7980be8f73b5298b717ccd2fcbcd8e7bba551c06789e017e"} {"level":"debug","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fecd2be4609340c7980be8f73b5298b717ccd2fcbcd8e7bba551c06789e017e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fecd2be4609340c7980be8f73b5298b717ccd2fcbcd8e7bba551c06789e017e"} {"level":"debug","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fecd2be4609340c7980be8f73b5298b717ccd2fcbcd8e7bba551c06789e017e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:17:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:17:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4fecd2be4609340c7980be8f73b5298b717ccd2fcbcd8e7bba551c06789e017e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fecd2be4609340c7980be8f73b5298b717ccd2fcbcd8e7bba551c06789e017e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fecd2be4609340c7980be8f73b5298b717ccd2fcbcd8e7bba551c06789e017e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7a7c86bc4874b23f72baba6565555819e4e82953b61fde321ff4ee9ab8da92a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fecd2be4609340c7980be8f73b5298b717ccd2fcbcd8e7bba551c06789e017e"} {"level":"info","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7a7c86bc4874b23f72baba6565555819e4e82953b61fde321ff4ee9ab8da92a"} {"level":"debug","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c093841747c8e65349beff3a8bc4a83ac5c1b41e87a1bfda733abb25c8932103","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:17:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:17:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c093841747c8e65349beff3a8bc4a83ac5c1b41e87a1bfda733abb25c8932103","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c093841747c8e65349beff3a8bc4a83ac5c1b41e87a1bfda733abb25c8932103","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c093841747c8e65349beff3a8bc4a83ac5c1b41e87a1bfda733abb25c8932103","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c093841747c8e65349beff3a8bc4a83ac5c1b41e87a1bfda733abb25c8932103"} {"level":"debug","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c093841747c8e65349beff3a8bc4a83ac5c1b41e87a1bfda733abb25c8932103","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c093841747c8e65349beff3a8bc4a83ac5c1b41e87a1bfda733abb25c8932103"} {"level":"debug","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c093841747c8e65349beff3a8bc4a83ac5c1b41e87a1bfda733abb25c8932103","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:17:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:17:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c093841747c8e65349beff3a8bc4a83ac5c1b41e87a1bfda733abb25c8932103"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c093841747c8e65349beff3a8bc4a83ac5c1b41e87a1bfda733abb25c8932103","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c093841747c8e65349beff3a8bc4a83ac5c1b41e87a1bfda733abb25c8932103","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c56b0acd234166a0b9620008f1e1d38eecc074022055886766fa38712068c75c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e37e76897e1eb8db22ee2808f5b33f1fc8832d466d679334c031358081190534","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c093841747c8e65349beff3a8bc4a83ac5c1b41e87a1bfda733abb25c8932103"} {"level":"info","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c56b0acd234166a0b9620008f1e1d38eecc074022055886766fa38712068c75c"} {"level":"info","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e37e76897e1eb8db22ee2808f5b33f1fc8832d466d679334c031358081190534"} {"level":"debug","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e05e1ce5e38677582ca67faea8cd560ed74c62ec5d9600d6fc35e812ab3a26a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:17:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:17:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e05e1ce5e38677582ca67faea8cd560ed74c62ec5d9600d6fc35e812ab3a26a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e05e1ce5e38677582ca67faea8cd560ed74c62ec5d9600d6fc35e812ab3a26a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dc8f660e81b8547b395b7de6fb4282fb1beff3e9e4cf7aae28cbd8a7131401f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e05e1ce5e38677582ca67faea8cd560ed74c62ec5d9600d6fc35e812ab3a26a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e05e1ce5e38677582ca67faea8cd560ed74c62ec5d9600d6fc35e812ab3a26a"} {"level":"debug","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bf8e085de66c16d9c4bf27a0e08d87f96285f1af8f993c7ec7a188478de5b34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e05e1ce5e38677582ca67faea8cd560ed74c62ec5d9600d6fc35e812ab3a26a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:17:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:17:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e05e1ce5e38677582ca67faea8cd560ed74c62ec5d9600d6fc35e812ab3a26a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dc8f660e81b8547b395b7de6fb4282fb1beff3e9e4cf7aae28cbd8a7131401f"} {"level":"info","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e05e1ce5e38677582ca67faea8cd560ed74c62ec5d9600d6fc35e812ab3a26a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e05e1ce5e38677582ca67faea8cd560ed74c62ec5d9600d6fc35e812ab3a26a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:17:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:17:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e05e1ce5e38677582ca67faea8cd560ed74c62ec5d9600d6fc35e812ab3a26a"} {"level":"info","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e05e1ce5e38677582ca67faea8cd560ed74c62ec5d9600d6fc35e812ab3a26a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e05e1ce5e38677582ca67faea8cd560ed74c62ec5d9600d6fc35e812ab3a26a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:17:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:17:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e05e1ce5e38677582ca67faea8cd560ed74c62ec5d9600d6fc35e812ab3a26a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e05e1ce5e38677582ca67faea8cd560ed74c62ec5d9600d6fc35e812ab3a26a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e05e1ce5e38677582ca67faea8cd560ed74c62ec5d9600d6fc35e812ab3a26a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:17:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:17:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e05e1ce5e38677582ca67faea8cd560ed74c62ec5d9600d6fc35e812ab3a26a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bf8e085de66c16d9c4bf27a0e08d87f96285f1af8f993c7ec7a188478de5b34"} {"level":"error","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8e05e1ce5e38677582ca67faea8cd560ed74c62ec5d9600d6fc35e812ab3a26a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8e05e1ce5e38677582ca67faea8cd560ed74c62ec5d9600d6fc35e812ab3a26a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e05e1ce5e38677582ca67faea8cd560ed74c62ec5d9600d6fc35e812ab3a26a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:17:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:17:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e05e1ce5e38677582ca67faea8cd560ed74c62ec5d9600d6fc35e812ab3a26a"} {"level":"info","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e05e1ce5e38677582ca67faea8cd560ed74c62ec5d9600d6fc35e812ab3a26a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a67c345d8bec792aebff611aa6c17862dbbbed84b3afaeb07a742131a570ee4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:17:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:17:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a67c345d8bec792aebff611aa6c17862dbbbed84b3afaeb07a742131a570ee4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e05e1ce5e38677582ca67faea8cd560ed74c62ec5d9600d6fc35e812ab3a26a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:17:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:17:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e05e1ce5e38677582ca67faea8cd560ed74c62ec5d9600d6fc35e812ab3a26a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a67c345d8bec792aebff611aa6c17862dbbbed84b3afaeb07a742131a570ee4c"} {"level":"info","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e05e1ce5e38677582ca67faea8cd560ed74c62ec5d9600d6fc35e812ab3a26a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75c8af7100d52c24189d533bf124c8e0e83458f848eb815e2fd5c424e15dd08e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a67c345d8bec792aebff611aa6c17862dbbbed84b3afaeb07a742131a570ee4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:17:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:17:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a67c345d8bec792aebff611aa6c17862dbbbed84b3afaeb07a742131a570ee4c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e05e1ce5e38677582ca67faea8cd560ed74c62ec5d9600d6fc35e812ab3a26a"} {"level":"info","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a67c345d8bec792aebff611aa6c17862dbbbed84b3afaeb07a742131a570ee4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb9f880206d6aa2405a6086f2e16bc7f3b0242708ee4ed6759135e1678ab4d85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e05e1ce5e38677582ca67faea8cd560ed74c62ec5d9600d6fc35e812ab3a26a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6ef379c6f4cb3f37dda6cc098c00dd726bb67cb446f14839589af346d07e01e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a67c345d8bec792aebff611aa6c17862dbbbed84b3afaeb07a742131a570ee4c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75c8af7100d52c24189d533bf124c8e0e83458f848eb815e2fd5c424e15dd08e"} {"level":"debug","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7ca7208cbd4819f6bc2276a9010117a0b28d77e0ee1c591f73d7baa99653925","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a67c345d8bec792aebff611aa6c17862dbbbed84b3afaeb07a742131a570ee4c"} {"level":"debug","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b10df5e87dbaa368a3b1cdde31b4afe063d54888573682d298fbedfc8535bb6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb9f880206d6aa2405a6086f2e16bc7f3b0242708ee4ed6759135e1678ab4d85"} {"level":"debug","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a54c6a7590e6a75673678f6cffffca201357bc47e594a88154f74fded68b130","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e05e1ce5e38677582ca67faea8cd560ed74c62ec5d9600d6fc35e812ab3a26a"} {"level":"debug","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfaef856ecf265448e7736b6ac0397b2cb57cfc9560fa209eefd18ddf1c15590","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6ef379c6f4cb3f37dda6cc098c00dd726bb67cb446f14839589af346d07e01e"} {"level":"info","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7ca7208cbd4819f6bc2276a9010117a0b28d77e0ee1c591f73d7baa99653925"} {"level":"debug","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87b8e0b25c11e858831bb6e6b18c5f40750c21c5a27fbdb0d321ca43b434ff58","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b10df5e87dbaa368a3b1cdde31b4afe063d54888573682d298fbedfc8535bb6"} {"level":"info","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a54c6a7590e6a75673678f6cffffca201357bc47e594a88154f74fded68b130"} {"level":"info","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfaef856ecf265448e7736b6ac0397b2cb57cfc9560fa209eefd18ddf1c15590"} {"level":"info","ts":"2026-07-10T21:17:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87b8e0b25c11e858831bb6e6b18c5f40750c21c5a27fbdb0d321ca43b434ff58"} {"level":"info","ts":"2026-07-10T21:17:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ae62acbf-42fd-4f79-88ea-ed2b3afdbb24","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:53688","PortSpecifier":{"PortValue":53688}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ae62acbf-42fd-4f79-88ea-ed2b3afdbb24","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-01037d.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T21:17:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ae62acbf-42fd-4f79-88ea-ed2b3afdbb24","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:53688","PortSpecifier":{"PortValue":53688}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783718231,"nanos":433874401},"http":{"id":"ae62acbf-42fd-4f79-88ea-ed2b3afdbb24","method":"POST","headers":{":authority":"e2e-shared-a-01037d.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:17:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ae62acbf-42fd-4f79-88ea-ed2b3afdbb24","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T21:17:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ae62acbf-42fd-4f79-88ea-ed2b3afdbb24","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5c8ab2d5-ac60-492f-9b62-36f585e148c2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f392fc79-4b6b-4571-a559-64ef3c7b3566"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2f28d6eab427"]}} {"level":"debug","ts":"2026-07-10T21:17:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ae62acbf-42fd-4f79-88ea-ed2b3afdbb24","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2f28d6eab427"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f392fc79-4b6b-4571-a559-64ef3c7b3566"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5c8ab2d5-ac60-492f-9b62-36f585e148c2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8eee558a6e1b3624d4065fc7008e112d07d12000aeba9ec4e0bbb69202e0afe6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-01037d.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:17:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae62acbf-42fd-4f79-88ea-ed2b3afdbb24","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:17:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae62acbf-42fd-4f79-88ea-ed2b3afdbb24","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:17:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae62acbf-42fd-4f79-88ea-ed2b3afdbb24","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-01037d/rate-test-model-01037d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:17:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ae62acbf-42fd-4f79-88ea-ed2b3afdbb24","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T21:17:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae62acbf-42fd-4f79-88ea-ed2b3afdbb24","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T21:17:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae62acbf-42fd-4f79-88ea-ed2b3afdbb24","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-10T21:17:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ae62acbf-42fd-4f79-88ea-ed2b3afdbb24","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T21:17:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ae62acbf-42fd-4f79-88ea-ed2b3afdbb24","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T21:17:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"216d843c-8cac-4210-883a-3a261ac0df7e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:55222","PortSpecifier":{"PortValue":55222}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"216d843c-8cac-4210-883a-3a261ac0df7e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e63f46.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T21:17:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"216d843c-8cac-4210-883a-3a261ac0df7e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:55222","PortSpecifier":{"PortValue":55222}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783718231,"nanos":475123118},"http":{"id":"216d843c-8cac-4210-883a-3a261ac0df7e","method":"POST","headers":{":authority":"e2e-shared-b-e63f46.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:17:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"216d843c-8cac-4210-883a-3a261ac0df7e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T21:17:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"216d843c-8cac-4210-883a-3a261ac0df7e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5c8ab2d5-ac60-492f-9b62-36f585e148c2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f392fc79-4b6b-4571-a559-64ef3c7b3566"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2f28d6eab427"]}} {"level":"debug","ts":"2026-07-10T21:17:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"216d843c-8cac-4210-883a-3a261ac0df7e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2f28d6eab427"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f392fc79-4b6b-4571-a559-64ef3c7b3566"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5c8ab2d5-ac60-492f-9b62-36f585e148c2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"57dea3d8fd23cd690dfb4e4e7f2713bd6b43347e494ed9c3a93295c590e4c985"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e63f46.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:17:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"216d843c-8cac-4210-883a-3a261ac0df7e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:17:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"216d843c-8cac-4210-883a-3a261ac0df7e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:17:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"216d843c-8cac-4210-883a-3a261ac0df7e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e63f46/rate-test-model-e63f46\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:17:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"216d843c-8cac-4210-883a-3a261ac0df7e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T21:17:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"216d843c-8cac-4210-883a-3a261ac0df7e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T21:17:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"216d843c-8cac-4210-883a-3a261ac0df7e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-10T21:17:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"216d843c-8cac-4210-883a-3a261ac0df7e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T21:17:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"216d843c-8cac-4210-883a-3a261ac0df7e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T21:17:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"479141c1-906f-432f-916f-0306de12fbbc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:53700","PortSpecifier":{"PortValue":53700}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"479141c1-906f-432f-916f-0306de12fbbc","method":"POST","path":"/ai-tenant-e2e-shared-a-01037d/rate-test-model-01037d/v1/completions","host":"e2e-shared-a-01037d.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T21:17:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"479141c1-906f-432f-916f-0306de12fbbc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:53700","PortSpecifier":{"PortValue":53700}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783718231,"nanos":515394423},"http":{"id":"479141c1-906f-432f-916f-0306de12fbbc","method":"POST","headers":{":authority":"e2e-shared-a-01037d.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-01037d/rate-test-model-01037d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:17:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"479141c1-906f-432f-916f-0306de12fbbc","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-dCtUnWbZwg8Gj5k1_tyNnkQSPyTCvlD0qyV7ncd5UE4ERxH0iwGrzIxqwUcZ"} {"level":"debug","ts":"2026-07-10T21:17:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"479141c1-906f-432f-916f-0306de12fbbc","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-01037d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-dCtUnWbZwg8Gj5k1_tyNnkQSPyTCvlD0qyV7ncd5UE4ERxH0iwGrzIxqwUcZ\"}"} {"level":"debug","ts":"2026-07-10T21:17:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"479141c1-906f-432f-916f-0306de12fbbc","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-01037d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7bc506d4-f957-4bf8-ab3d-bc6c80f01a97","keyName":"e2e-rate-a-eb306d","subscription":"e2e-rate-iso-a-eb306d","tenant":"e2e-shared-a-01037d","userId":"7bc506d4-f957-4bf8-ab3d-bc6c80f01a97","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T21:17:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"479141c1-906f-432f-916f-0306de12fbbc","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-01037d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-01037d/rate-test-model-01037d\",\"requestedSubscription\":\"e2e-rate-iso-a-eb306d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-10T21:17:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"479141c1-906f-432f-916f-0306de12fbbc","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-01037d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-01037d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-eb306d","namespace":"ai-tenant-e2e-shared-a-01037d","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-10T21:17:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"479141c1-906f-432f-916f-0306de12fbbc","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:17:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"479141c1-906f-432f-916f-0306de12fbbc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:17:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"479141c1-906f-432f-916f-0306de12fbbc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:17:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"479141c1-906f-432f-916f-0306de12fbbc","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:17:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"479141c1-906f-432f-916f-0306de12fbbc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-01037d/rate-test-model-01037d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:17:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"479141c1-906f-432f-916f-0306de12fbbc","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T21:17:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"479141c1-906f-432f-916f-0306de12fbbc","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-eb306d"} {"level":"debug","ts":"2026-07-10T21:17:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"479141c1-906f-432f-916f-0306de12fbbc","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T21:17:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"479141c1-906f-432f-916f-0306de12fbbc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7bc506d4-f957-4bf8-ab3d-bc6c80f01a97","keyName":"e2e-rate-a-eb306d","selected_subscription":"e2e-rate-iso-a-eb306d","selected_subscription_key":"ai-tenant-e2e-shared-a-01037d/e2e-rate-iso-a-eb306d@ai-tenant-e2e-shared-a-01037d/rate-test-model-01037d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-01037d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-eb306d","namespace":"ai-tenant-e2e-shared-a-01037d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-10T21:17:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"479141c1-906f-432f-916f-0306de12fbbc","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T21:17:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"479141c1-906f-432f-916f-0306de12fbbc","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T21:17:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aea16588-1939-42a7-9e41-7810a99083f7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:53710","PortSpecifier":{"PortValue":53710}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"aea16588-1939-42a7-9e41-7810a99083f7","method":"POST","path":"/ai-tenant-e2e-shared-a-01037d/rate-test-model-01037d/v1/completions","host":"e2e-shared-a-01037d.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T21:17:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aea16588-1939-42a7-9e41-7810a99083f7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:53710","PortSpecifier":{"PortValue":53710}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783718232,"nanos":598311840},"http":{"id":"aea16588-1939-42a7-9e41-7810a99083f7","method":"POST","headers":{":authority":"e2e-shared-a-01037d.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-01037d/rate-test-model-01037d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:17:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"aea16588-1939-42a7-9e41-7810a99083f7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-dCtUnWbZwg8Gj5k1_tyNnkQSPyTCvlD0qyV7ncd5UE4ERxH0iwGrzIxqwUcZ"} {"level":"debug","ts":"2026-07-10T21:17:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"aea16588-1939-42a7-9e41-7810a99083f7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-01037d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-dCtUnWbZwg8Gj5k1_tyNnkQSPyTCvlD0qyV7ncd5UE4ERxH0iwGrzIxqwUcZ\"}"} {"level":"debug","ts":"2026-07-10T21:17:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"aea16588-1939-42a7-9e41-7810a99083f7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-01037d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7bc506d4-f957-4bf8-ab3d-bc6c80f01a97","keyName":"e2e-rate-a-eb306d","subscription":"e2e-rate-iso-a-eb306d","tenant":"e2e-shared-a-01037d","userId":"7bc506d4-f957-4bf8-ab3d-bc6c80f01a97","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T21:17:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"aea16588-1939-42a7-9e41-7810a99083f7","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-01037d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-01037d/rate-test-model-01037d\",\"requestedSubscription\":\"e2e-rate-iso-a-eb306d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-10T21:17:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"aea16588-1939-42a7-9e41-7810a99083f7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-01037d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-01037d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-eb306d","namespace":"ai-tenant-e2e-shared-a-01037d","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-10T21:17:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"aea16588-1939-42a7-9e41-7810a99083f7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:17:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aea16588-1939-42a7-9e41-7810a99083f7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:17:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aea16588-1939-42a7-9e41-7810a99083f7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:17:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aea16588-1939-42a7-9e41-7810a99083f7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-01037d/rate-test-model-01037d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:17:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aea16588-1939-42a7-9e41-7810a99083f7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:17:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aea16588-1939-42a7-9e41-7810a99083f7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T21:17:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aea16588-1939-42a7-9e41-7810a99083f7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T21:17:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aea16588-1939-42a7-9e41-7810a99083f7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-eb306d"} {"level":"debug","ts":"2026-07-10T21:17:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aea16588-1939-42a7-9e41-7810a99083f7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7bc506d4-f957-4bf8-ab3d-bc6c80f01a97","keyName":"e2e-rate-a-eb306d","selected_subscription":"e2e-rate-iso-a-eb306d","selected_subscription_key":"ai-tenant-e2e-shared-a-01037d/e2e-rate-iso-a-eb306d@ai-tenant-e2e-shared-a-01037d/rate-test-model-01037d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-01037d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-eb306d","namespace":"ai-tenant-e2e-shared-a-01037d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-10T21:17:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aea16588-1939-42a7-9e41-7810a99083f7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T21:17:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aea16588-1939-42a7-9e41-7810a99083f7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T21:17:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"74a1dd68-7484-47f0-9cfd-8324f931c428","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:53720","PortSpecifier":{"PortValue":53720}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"74a1dd68-7484-47f0-9cfd-8324f931c428","method":"POST","path":"/ai-tenant-e2e-shared-a-01037d/rate-test-model-01037d/v1/completions","host":"e2e-shared-a-01037d.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T21:17:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"74a1dd68-7484-47f0-9cfd-8324f931c428","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:53720","PortSpecifier":{"PortValue":53720}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783718233,"nanos":632976725},"http":{"id":"74a1dd68-7484-47f0-9cfd-8324f931c428","method":"POST","headers":{":authority":"e2e-shared-a-01037d.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-01037d/rate-test-model-01037d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:17:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"74a1dd68-7484-47f0-9cfd-8324f931c428","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-dCtUnWbZwg8Gj5k1_tyNnkQSPyTCvlD0qyV7ncd5UE4ERxH0iwGrzIxqwUcZ"} {"level":"debug","ts":"2026-07-10T21:17:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"74a1dd68-7484-47f0-9cfd-8324f931c428","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-01037d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-dCtUnWbZwg8Gj5k1_tyNnkQSPyTCvlD0qyV7ncd5UE4ERxH0iwGrzIxqwUcZ\"}"} {"level":"debug","ts":"2026-07-10T21:17:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"74a1dd68-7484-47f0-9cfd-8324f931c428","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-01037d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7bc506d4-f957-4bf8-ab3d-bc6c80f01a97","keyName":"e2e-rate-a-eb306d","subscription":"e2e-rate-iso-a-eb306d","tenant":"e2e-shared-a-01037d","userId":"7bc506d4-f957-4bf8-ab3d-bc6c80f01a97","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T21:17:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"74a1dd68-7484-47f0-9cfd-8324f931c428","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-01037d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-01037d/rate-test-model-01037d\",\"requestedSubscription\":\"e2e-rate-iso-a-eb306d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-10T21:17:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"74a1dd68-7484-47f0-9cfd-8324f931c428","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-01037d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-01037d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-eb306d","namespace":"ai-tenant-e2e-shared-a-01037d","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-10T21:17:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"74a1dd68-7484-47f0-9cfd-8324f931c428","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:17:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"74a1dd68-7484-47f0-9cfd-8324f931c428","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:17:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"74a1dd68-7484-47f0-9cfd-8324f931c428","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:17:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"74a1dd68-7484-47f0-9cfd-8324f931c428","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-01037d/rate-test-model-01037d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:17:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"74a1dd68-7484-47f0-9cfd-8324f931c428","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:17:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"74a1dd68-7484-47f0-9cfd-8324f931c428","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T21:17:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"74a1dd68-7484-47f0-9cfd-8324f931c428","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-eb306d"} {"level":"debug","ts":"2026-07-10T21:17:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"74a1dd68-7484-47f0-9cfd-8324f931c428","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T21:17:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"74a1dd68-7484-47f0-9cfd-8324f931c428","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7bc506d4-f957-4bf8-ab3d-bc6c80f01a97","keyName":"e2e-rate-a-eb306d","selected_subscription":"e2e-rate-iso-a-eb306d","selected_subscription_key":"ai-tenant-e2e-shared-a-01037d/e2e-rate-iso-a-eb306d@ai-tenant-e2e-shared-a-01037d/rate-test-model-01037d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-01037d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-eb306d","namespace":"ai-tenant-e2e-shared-a-01037d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-10T21:17:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"74a1dd68-7484-47f0-9cfd-8324f931c428","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T21:17:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"74a1dd68-7484-47f0-9cfd-8324f931c428","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T21:17:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e6aebbc7-76e8-4084-88b8-abb350223d2a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:48446","PortSpecifier":{"PortValue":48446}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e6aebbc7-76e8-4084-88b8-abb350223d2a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-01037d.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T21:17:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e6aebbc7-76e8-4084-88b8-abb350223d2a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:48446","PortSpecifier":{"PortValue":48446}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783718244,"nanos":376802642},"http":{"id":"e6aebbc7-76e8-4084-88b8-abb350223d2a","method":"POST","headers":{":authority":"e2e-shared-a-01037d.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:17:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e6aebbc7-76e8-4084-88b8-abb350223d2a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T21:17:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e6aebbc7-76e8-4084-88b8-abb350223d2a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5c8ab2d5-ac60-492f-9b62-36f585e148c2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f392fc79-4b6b-4571-a559-64ef3c7b3566"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2f28d6eab427"]}} {"level":"debug","ts":"2026-07-10T21:17:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e6aebbc7-76e8-4084-88b8-abb350223d2a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2f28d6eab427"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f392fc79-4b6b-4571-a559-64ef3c7b3566"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5c8ab2d5-ac60-492f-9b62-36f585e148c2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8eee558a6e1b3624d4065fc7008e112d07d12000aeba9ec4e0bbb69202e0afe6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-01037d.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:17:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6aebbc7-76e8-4084-88b8-abb350223d2a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:17:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6aebbc7-76e8-4084-88b8-abb350223d2a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:17:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6aebbc7-76e8-4084-88b8-abb350223d2a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-01037d/rate-test-model-01037d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:17:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e6aebbc7-76e8-4084-88b8-abb350223d2a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T21:17:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6aebbc7-76e8-4084-88b8-abb350223d2a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T21:17:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6aebbc7-76e8-4084-88b8-abb350223d2a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-10T21:17:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e6aebbc7-76e8-4084-88b8-abb350223d2a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T21:17:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e6aebbc7-76e8-4084-88b8-abb350223d2a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T21:17:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"be48dcf8-27ce-4ba1-a372-47a1c3521b74","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:48146","PortSpecifier":{"PortValue":48146}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"be48dcf8-27ce-4ba1-a372-47a1c3521b74","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e63f46.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T21:17:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"be48dcf8-27ce-4ba1-a372-47a1c3521b74","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:48146","PortSpecifier":{"PortValue":48146}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783718244,"nanos":416277286},"http":{"id":"be48dcf8-27ce-4ba1-a372-47a1c3521b74","method":"POST","headers":{":authority":"e2e-shared-b-e63f46.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:17:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"be48dcf8-27ce-4ba1-a372-47a1c3521b74","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T21:17:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"be48dcf8-27ce-4ba1-a372-47a1c3521b74","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5c8ab2d5-ac60-492f-9b62-36f585e148c2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f392fc79-4b6b-4571-a559-64ef3c7b3566"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2f28d6eab427"]}} {"level":"debug","ts":"2026-07-10T21:17:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"be48dcf8-27ce-4ba1-a372-47a1c3521b74","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2f28d6eab427"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f392fc79-4b6b-4571-a559-64ef3c7b3566"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5c8ab2d5-ac60-492f-9b62-36f585e148c2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"57dea3d8fd23cd690dfb4e4e7f2713bd6b43347e494ed9c3a93295c590e4c985"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e63f46.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:17:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be48dcf8-27ce-4ba1-a372-47a1c3521b74","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:17:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be48dcf8-27ce-4ba1-a372-47a1c3521b74","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:17:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be48dcf8-27ce-4ba1-a372-47a1c3521b74","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e63f46/rate-test-model-e63f46\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:17:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"be48dcf8-27ce-4ba1-a372-47a1c3521b74","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T21:17:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be48dcf8-27ce-4ba1-a372-47a1c3521b74","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T21:17:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be48dcf8-27ce-4ba1-a372-47a1c3521b74","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-10T21:17:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"be48dcf8-27ce-4ba1-a372-47a1c3521b74","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T21:17:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"be48dcf8-27ce-4ba1-a372-47a1c3521b74","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T21:17:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2171f98b-5961-49e2-adbf-c67b00dabc07","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:48460","PortSpecifier":{"PortValue":48460}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2171f98b-5961-49e2-adbf-c67b00dabc07","method":"POST","path":"/ai-tenant-e2e-shared-a-01037d/rate-test-model-01037d/v1/completions","host":"e2e-shared-a-01037d.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T21:17:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2171f98b-5961-49e2-adbf-c67b00dabc07","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:48460","PortSpecifier":{"PortValue":48460}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783718244,"nanos":452986835},"http":{"id":"2171f98b-5961-49e2-adbf-c67b00dabc07","method":"POST","headers":{":authority":"e2e-shared-a-01037d.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-01037d/rate-test-model-01037d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:17:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2171f98b-5961-49e2-adbf-c67b00dabc07","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-HAdofNWuBRoyjoHW_9I81It7h7NetXxwhWT6S4GVHbPI6dUeTQrAuSKRTGHU"} {"level":"debug","ts":"2026-07-10T21:17:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2171f98b-5961-49e2-adbf-c67b00dabc07","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-01037d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-HAdofNWuBRoyjoHW_9I81It7h7NetXxwhWT6S4GVHbPI6dUeTQrAuSKRTGHU\"}"} {"level":"debug","ts":"2026-07-10T21:17:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2171f98b-5961-49e2-adbf-c67b00dabc07","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-01037d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1697eed2-5240-43d0-bbe0-1488e0c61fd3","keyName":"e2e-rate-a-760905","subscription":"e2e-rate-iso-a-760905","tenant":"e2e-shared-a-01037d","userId":"1697eed2-5240-43d0-bbe0-1488e0c61fd3","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T21:17:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2171f98b-5961-49e2-adbf-c67b00dabc07","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-01037d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-01037d/rate-test-model-01037d\",\"requestedSubscription\":\"e2e-rate-iso-a-760905\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-10T21:17:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2171f98b-5961-49e2-adbf-c67b00dabc07","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-01037d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-01037d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-760905","namespace":"ai-tenant-e2e-shared-a-01037d","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-10T21:17:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2171f98b-5961-49e2-adbf-c67b00dabc07","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:17:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2171f98b-5961-49e2-adbf-c67b00dabc07","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:17:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2171f98b-5961-49e2-adbf-c67b00dabc07","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:17:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2171f98b-5961-49e2-adbf-c67b00dabc07","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:17:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2171f98b-5961-49e2-adbf-c67b00dabc07","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-01037d/rate-test-model-01037d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:17:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2171f98b-5961-49e2-adbf-c67b00dabc07","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T21:17:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2171f98b-5961-49e2-adbf-c67b00dabc07","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-760905"} {"level":"debug","ts":"2026-07-10T21:17:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2171f98b-5961-49e2-adbf-c67b00dabc07","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T21:17:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2171f98b-5961-49e2-adbf-c67b00dabc07","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1697eed2-5240-43d0-bbe0-1488e0c61fd3","keyName":"e2e-rate-a-760905","selected_subscription":"e2e-rate-iso-a-760905","selected_subscription_key":"ai-tenant-e2e-shared-a-01037d/e2e-rate-iso-a-760905@ai-tenant-e2e-shared-a-01037d/rate-test-model-01037d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-01037d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-760905","namespace":"ai-tenant-e2e-shared-a-01037d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-10T21:17:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2171f98b-5961-49e2-adbf-c67b00dabc07","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T21:17:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2171f98b-5961-49e2-adbf-c67b00dabc07","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T21:17:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5339c18c-e26d-4992-a309-fd1bbc2dea34","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:48472","PortSpecifier":{"PortValue":48472}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5339c18c-e26d-4992-a309-fd1bbc2dea34","method":"POST","path":"/ai-tenant-e2e-shared-a-01037d/rate-test-model-01037d/v1/completions","host":"e2e-shared-a-01037d.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T21:17:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5339c18c-e26d-4992-a309-fd1bbc2dea34","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:48472","PortSpecifier":{"PortValue":48472}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783718245,"nanos":491499953},"http":{"id":"5339c18c-e26d-4992-a309-fd1bbc2dea34","method":"POST","headers":{":authority":"e2e-shared-a-01037d.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-01037d/rate-test-model-01037d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:17:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5339c18c-e26d-4992-a309-fd1bbc2dea34","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-HAdofNWuBRoyjoHW_9I81It7h7NetXxwhWT6S4GVHbPI6dUeTQrAuSKRTGHU"} {"level":"debug","ts":"2026-07-10T21:17:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5339c18c-e26d-4992-a309-fd1bbc2dea34","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-01037d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-HAdofNWuBRoyjoHW_9I81It7h7NetXxwhWT6S4GVHbPI6dUeTQrAuSKRTGHU\"}"} {"level":"debug","ts":"2026-07-10T21:17:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5339c18c-e26d-4992-a309-fd1bbc2dea34","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-01037d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1697eed2-5240-43d0-bbe0-1488e0c61fd3","keyName":"e2e-rate-a-760905","subscription":"e2e-rate-iso-a-760905","tenant":"e2e-shared-a-01037d","userId":"1697eed2-5240-43d0-bbe0-1488e0c61fd3","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T21:17:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5339c18c-e26d-4992-a309-fd1bbc2dea34","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-01037d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-01037d/rate-test-model-01037d\",\"requestedSubscription\":\"e2e-rate-iso-a-760905\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-10T21:17:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5339c18c-e26d-4992-a309-fd1bbc2dea34","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-01037d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-01037d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-760905","namespace":"ai-tenant-e2e-shared-a-01037d","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-10T21:17:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5339c18c-e26d-4992-a309-fd1bbc2dea34","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:17:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5339c18c-e26d-4992-a309-fd1bbc2dea34","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:17:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5339c18c-e26d-4992-a309-fd1bbc2dea34","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:17:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5339c18c-e26d-4992-a309-fd1bbc2dea34","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:17:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5339c18c-e26d-4992-a309-fd1bbc2dea34","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-01037d/rate-test-model-01037d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:17:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5339c18c-e26d-4992-a309-fd1bbc2dea34","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T21:17:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5339c18c-e26d-4992-a309-fd1bbc2dea34","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T21:17:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5339c18c-e26d-4992-a309-fd1bbc2dea34","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-760905"} {"level":"debug","ts":"2026-07-10T21:17:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5339c18c-e26d-4992-a309-fd1bbc2dea34","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1697eed2-5240-43d0-bbe0-1488e0c61fd3","keyName":"e2e-rate-a-760905","selected_subscription":"e2e-rate-iso-a-760905","selected_subscription_key":"ai-tenant-e2e-shared-a-01037d/e2e-rate-iso-a-760905@ai-tenant-e2e-shared-a-01037d/rate-test-model-01037d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-01037d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-760905","namespace":"ai-tenant-e2e-shared-a-01037d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-10T21:17:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5339c18c-e26d-4992-a309-fd1bbc2dea34","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T21:17:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5339c18c-e26d-4992-a309-fd1bbc2dea34","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T21:17:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c82dbcc9-15d9-485b-b11f-82a6d4fecab0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:48476","PortSpecifier":{"PortValue":48476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c82dbcc9-15d9-485b-b11f-82a6d4fecab0","method":"POST","path":"/ai-tenant-e2e-shared-a-01037d/rate-test-model-01037d/v1/completions","host":"e2e-shared-a-01037d.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T21:17:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c82dbcc9-15d9-485b-b11f-82a6d4fecab0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:48476","PortSpecifier":{"PortValue":48476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783718246,"nanos":526389765},"http":{"id":"c82dbcc9-15d9-485b-b11f-82a6d4fecab0","method":"POST","headers":{":authority":"e2e-shared-a-01037d.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-01037d/rate-test-model-01037d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:17:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c82dbcc9-15d9-485b-b11f-82a6d4fecab0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-HAdofNWuBRoyjoHW_9I81It7h7NetXxwhWT6S4GVHbPI6dUeTQrAuSKRTGHU"} {"level":"debug","ts":"2026-07-10T21:17:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c82dbcc9-15d9-485b-b11f-82a6d4fecab0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-01037d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-HAdofNWuBRoyjoHW_9I81It7h7NetXxwhWT6S4GVHbPI6dUeTQrAuSKRTGHU\"}"} {"level":"debug","ts":"2026-07-10T21:17:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c82dbcc9-15d9-485b-b11f-82a6d4fecab0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-01037d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1697eed2-5240-43d0-bbe0-1488e0c61fd3","keyName":"e2e-rate-a-760905","subscription":"e2e-rate-iso-a-760905","tenant":"e2e-shared-a-01037d","userId":"1697eed2-5240-43d0-bbe0-1488e0c61fd3","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T21:17:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c82dbcc9-15d9-485b-b11f-82a6d4fecab0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-01037d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-01037d/rate-test-model-01037d\",\"requestedSubscription\":\"e2e-rate-iso-a-760905\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-10T21:17:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c82dbcc9-15d9-485b-b11f-82a6d4fecab0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-01037d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-01037d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-760905","namespace":"ai-tenant-e2e-shared-a-01037d","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-10T21:17:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c82dbcc9-15d9-485b-b11f-82a6d4fecab0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:17:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c82dbcc9-15d9-485b-b11f-82a6d4fecab0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:17:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c82dbcc9-15d9-485b-b11f-82a6d4fecab0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:17:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c82dbcc9-15d9-485b-b11f-82a6d4fecab0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:17:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c82dbcc9-15d9-485b-b11f-82a6d4fecab0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-01037d/rate-test-model-01037d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:17:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c82dbcc9-15d9-485b-b11f-82a6d4fecab0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-760905"} {"level":"debug","ts":"2026-07-10T21:17:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c82dbcc9-15d9-485b-b11f-82a6d4fecab0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T21:17:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c82dbcc9-15d9-485b-b11f-82a6d4fecab0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T21:17:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c82dbcc9-15d9-485b-b11f-82a6d4fecab0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1697eed2-5240-43d0-bbe0-1488e0c61fd3","keyName":"e2e-rate-a-760905","selected_subscription":"e2e-rate-iso-a-760905","selected_subscription_key":"ai-tenant-e2e-shared-a-01037d/e2e-rate-iso-a-760905@ai-tenant-e2e-shared-a-01037d/rate-test-model-01037d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-01037d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-760905","namespace":"ai-tenant-e2e-shared-a-01037d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-10T21:17:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c82dbcc9-15d9-485b-b11f-82a6d4fecab0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T21:17:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c82dbcc9-15d9-485b-b11f-82a6d4fecab0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T21:17:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"617a37ac-86f7-43b4-9bce-bba74c0113a5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:48154","PortSpecifier":{"PortValue":48154}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"617a37ac-86f7-43b4-9bce-bba74c0113a5","method":"POST","path":"/ai-tenant-e2e-shared-b-e63f46/rate-test-model-e63f46/v1/completions","host":"e2e-shared-b-e63f46.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T21:17:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"617a37ac-86f7-43b4-9bce-bba74c0113a5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:48154","PortSpecifier":{"PortValue":48154}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783718246,"nanos":558935692},"http":{"id":"617a37ac-86f7-43b4-9bce-bba74c0113a5","method":"POST","headers":{":authority":"e2e-shared-b-e63f46.apps.0a229967-4618-49f2-b1eb-2f28d6eab427.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-e63f46/rate-test-model-e63f46/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:17:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"617a37ac-86f7-43b4-9bce-bba74c0113a5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Rq8myBb7ZlVtow1d_Gl7ObGJIvNTe3wFnaslPGQADWTxdoQWcVTjfSbj63IT"} {"level":"debug","ts":"2026-07-10T21:17:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"617a37ac-86f7-43b4-9bce-bba74c0113a5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-e63f46.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Rq8myBb7ZlVtow1d_Gl7ObGJIvNTe3wFnaslPGQADWTxdoQWcVTjfSbj63IT\"}"} {"level":"debug","ts":"2026-07-10T21:17:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"617a37ac-86f7-43b4-9bce-bba74c0113a5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-e63f46.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b58e8ee3-f038-4932-89a7-4064828fd87c","keyName":"e2e-rate-b-760905","subscription":"e2e-rate-iso-b-760905","tenant":"e2e-shared-b-e63f46","userId":"b58e8ee3-f038-4932-89a7-4064828fd87c","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T21:17:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"617a37ac-86f7-43b4-9bce-bba74c0113a5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-e63f46.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-e63f46/rate-test-model-e63f46\",\"requestedSubscription\":\"e2e-rate-iso-b-760905\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-10T21:17:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"617a37ac-86f7-43b4-9bce-bba74c0113a5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-e63f46.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e63f46","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-760905","namespace":"ai-tenant-e2e-shared-b-e63f46","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-10T21:17:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"617a37ac-86f7-43b4-9bce-bba74c0113a5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:17:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"617a37ac-86f7-43b4-9bce-bba74c0113a5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:17:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"617a37ac-86f7-43b4-9bce-bba74c0113a5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:17:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"617a37ac-86f7-43b4-9bce-bba74c0113a5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e63f46/rate-test-model-e63f46\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:17:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"617a37ac-86f7-43b4-9bce-bba74c0113a5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:17:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"617a37ac-86f7-43b4-9bce-bba74c0113a5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T21:17:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"617a37ac-86f7-43b4-9bce-bba74c0113a5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T21:17:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"617a37ac-86f7-43b4-9bce-bba74c0113a5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-760905"} {"level":"debug","ts":"2026-07-10T21:17:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"617a37ac-86f7-43b4-9bce-bba74c0113a5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b58e8ee3-f038-4932-89a7-4064828fd87c","keyName":"e2e-rate-b-760905","selected_subscription":"e2e-rate-iso-b-760905","selected_subscription_key":"ai-tenant-e2e-shared-b-e63f46/e2e-rate-iso-b-760905@ai-tenant-e2e-shared-b-e63f46/rate-test-model-e63f46","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e63f46","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-760905","namespace":"ai-tenant-e2e-shared-b-e63f46","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-10T21:17:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"617a37ac-86f7-43b4-9bce-bba74c0113a5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T21:17:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"617a37ac-86f7-43b4-9bce-bba74c0113a5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T21:17:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a67c345d8bec792aebff611aa6c17862dbbbed84b3afaeb07a742131a570ee4c"} {"level":"info","ts":"2026-07-10T21:17:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/87b8e0b25c11e858831bb6e6b18c5f40750c21c5a27fbdb0d321ca43b434ff58"} {"level":"info","ts":"2026-07-10T21:17:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6a54c6a7590e6a75673678f6cffffca201357bc47e594a88154f74fded68b130"} {"level":"info","ts":"2026-07-10T21:17:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8e05e1ce5e38677582ca67faea8cd560ed74c62ec5d9600d6fc35e812ab3a26a"} {"level":"info","ts":"2026-07-10T21:17:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/24d90e916b685427402ad3edd87775b14fdea02d55ed45f11082e591dc831919"} {"level":"info","ts":"2026-07-10T21:17:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/32d1866ec7ab6134b3f6ebe10f01afa8722ac3e44cfb7180420385c5978f28f5"} {"level":"info","ts":"2026-07-10T21:17:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bb9f880206d6aa2405a6086f2e16bc7f3b0242708ee4ed6759135e1678ab4d85"} {"level":"info","ts":"2026-07-10T21:17:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c56b0acd234166a0b9620008f1e1d38eecc074022055886766fa38712068c75c"} {"level":"info","ts":"2026-07-10T21:17:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a7ca7208cbd4819f6bc2276a9010117a0b28d77e0ee1c591f73d7baa99653925"} {"level":"info","ts":"2026-07-10T21:17:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9b10df5e87dbaa368a3b1cdde31b4afe063d54888573682d298fbedfc8535bb6"} {"level":"info","ts":"2026-07-10T21:17:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4fecd2be4609340c7980be8f73b5298b717ccd2fcbcd8e7bba551c06789e017e"} {"level":"info","ts":"2026-07-10T21:17:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7705e4aa8b476fb77ba28a144b7ae46cd01b5c0020e04f4daa2c195056894cf5"} {"level":"info","ts":"2026-07-10T21:17:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d6ef379c6f4cb3f37dda6cc098c00dd726bb67cb446f14839589af346d07e01e"} {"level":"info","ts":"2026-07-10T21:17:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8bf8e085de66c16d9c4bf27a0e08d87f96285f1af8f993c7ec7a188478de5b34"} {"level":"info","ts":"2026-07-10T21:17:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/29f5aed263a4ef4d9f53113b64521af41a8d4f9c93124ba9429fd756daf619ed"} {"level":"info","ts":"2026-07-10T21:17:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4dc8f660e81b8547b395b7de6fb4282fb1beff3e9e4cf7aae28cbd8a7131401f"} {"level":"info","ts":"2026-07-10T21:17:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bfaef856ecf265448e7736b6ac0397b2cb57cfc9560fa209eefd18ddf1c15590"} {"level":"info","ts":"2026-07-10T21:17:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8eee558a6e1b3624d4065fc7008e112d07d12000aeba9ec4e0bbb69202e0afe6"} {"level":"info","ts":"2026-07-10T21:17:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dda979ecbc2fddf9870d357957b42eef8f88cc49ca5bc932403aa3ae97eb0af7"} {"level":"info","ts":"2026-07-10T21:17:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/75c8af7100d52c24189d533bf124c8e0e83458f848eb815e2fd5c424e15dd08e"} {"level":"info","ts":"2026-07-10T21:17:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/57dea3d8fd23cd690dfb4e4e7f2713bd6b43347e494ed9c3a93295c590e4c985"} {"level":"info","ts":"2026-07-10T21:17:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e7a7c86bc4874b23f72baba6565555819e4e82953b61fde321ff4ee9ab8da92a"} {"level":"info","ts":"2026-07-10T21:17:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e37e76897e1eb8db22ee2808f5b33f1fc8832d466d679334c031358081190534"} {"level":"info","ts":"2026-07-10T21:17:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c093841747c8e65349beff3a8bc4a83ac5c1b41e87a1bfda733abb25c8932103"}